CVE-2007-5064

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-09-24 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in a certain ActiveX control in Xunlei Web Thunder 5.6.9.344, possibly the DapPlayer ActiveX control in DapPlayer_Now.dll, allows remote attackers to execute arbitrary code via a long first argument to the DownURL2 method. NOTE: some of these details are obtained from third party information.

Affected products

Xunlei Web Thunder: 5.6.9.344

References

http://1v1.name/show-283-1.html
http://osvdb.org/37777
http://secunia.com/advisories/26964
http://www.securityfocus.com/bid/25751
http://www.vupen.com/english/advisories/2007/3309
http://1v1.name/show-283-1.html
http://osvdb.org/37777
http://secunia.com/advisories/26964
http://www.securityfocus.com/bid/25751
http://www.vupen.com/english/advisories/2007/3309

Get alerted when CVE-2007-5064 or the next vulnerability affects your stack