CVE-2007-6731

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 14.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-09-13 · updated 2026-06-16
Weakness: CWE-94

Description

Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in (1) test_oxm and (2) decrunch_oxm functions in misc/oxm.c, leading to a buffer overflow.

Affected products

Claudio Matsuoka Extended Module Player: through 2.5.1; 2.2.0, 2.2.1, 2.3.0, 2.3.1, 2.3.2, 2.4.0 (+2)

References

http://aluigi.altervista.org/adv/xmpbof-adv.txt
http://www.securityfocus.com/bid/27047
http://www.vupen.com/english/advisories/2008/0009
http://aluigi.altervista.org/adv/xmpbof-adv.txt
http://www.securityfocus.com/bid/27047
http://www.vupen.com/english/advisories/2008/0009

Get alerted when CVE-2007-6731 or the next vulnerability affects your stack