CVE-2007-4032

MEDIUM 6.8CVE-2007-4032 · Published 27/07/2007 · updated 16/06/2026

In short

CVE-2007-4032 is a MEDIUM (CVSS 6.8) vulnerability affecting crystalplayer pro (crystal reality llc).
Chance of exploitation in the next 30 days (EPSS): 3.8%, higher than 90.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
crystalplayer pro crystal_reality_llc	`= 1.98`	No fix yet

Buffer overflow in CrystalPlayer Pro 1.98 allows user-assisted remote attackers to execute arbitrary code via a long string in a .mls Playlist file.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.