CVE-2007-6609

MEDIUM 5.0CVE-2007-6609 · Published 31/12/2007 · updated 16/06/2026

In short

CVE-2007-6609 is a MEDIUM (CVSS 5.0) vulnerability affecting coolplayer (coolplayer).
Chance of exploitation in the next 30 days (EPSS): 5.2%, higher than 92.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
coolplayer coolplayer	`= 217`	No fix yet

Description

Multiple stack-based buffer overflows in the CPLI_ReadTag_OGG function in CPI_PlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long (1) cTag or (2) cValue field in an OGG Vorbis file.

References

aluigi.altervista.org/adv/culplayer-adv.txt
osvdb.org/42671
secunia.com/advisories/28226
securityreason.com/securityalert/3503
securityfocus.com/archive/1/485616/100/0/threaded
securityfocus.com/bid/27061
vupen.com/english/advisories/2008/0008
exchange.xforce.ibmcloud.com/vulnerabilities/39325

More vulnerabilities in coolplayer

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free