Search vulnerabilities

Results 2

Export CSV
CVE-2007-6731

xmp: Multiple buffer overflows in OXM decoder

Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in (1) test_oxm and (2) decrunch_oxm functions in misc/oxm.c, leading to a buffer overflow.

CVSS 2.0 · 10.0 Critical EPSS 14.1% KEV · Not listed
CVE-2007-6732

xmp: Buffer overflow in DTT file loader

Multiple buffer overflows in the dtt_load function in loaders/dtt_load.c Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors related to an untrusted length value and the (1) pofs and (2) plen arrays.

CVSS 2.0 · 10.0 Critical EPSS 5.6% KEV · Not listed