CVE-2007-2568

CRITICAL 9.3CVE-2007-2568 · Published 16/05/2007 · updated 16/06/2026

In short

CVE-2007-2568 is a CRITICAL (CVSS 9.3) vulnerability affecting vcdgear (vcdgear).
Chance of exploitation in the next 30 days (EPSS): 6.2%, higher than 93.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
vcdgear vcdgear	`= 3.55`	No fix yet

Description

Multiple stack-based buffer overflows in VCDGear 3.55 allow user-assisted remote attackers to execute arbitrary code via a long (1) tag or (2) track type in a CUE file.

References

osvdb.org/36178
secunia.com/advisories/25117 · Vendor Advisory
secunia.com/secunia_research/2007-51/advisory · Vendor Advisory
securityfocus.com/bid/24003
vupen.com/english/advisories/2007/1835
exchange.xforce.ibmcloud.com/vulnerabilities/34317

More vulnerabilities in vcdgear

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free