ByteOS Network

NVD Vulnerability Details :

CVE-2007-0653

Modified

Source-PSIRT-CNA@flexerasoftware.com

Published At-21 Mar, 2007 | 22:19

Updated At-16 Oct, 2018 | 16:33

Integer overflow in X MultiMedia System (xmms) 1.2.10, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via crafted header information in a skin bitmap image, which triggers memory corruption.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Linux Kernel Organization, Inc

>>linux_kernel>>*

cpe:2.3:o:linux:linux_kernel:*:*:ia32_64-bit:*:*:*:*:*

x_multimedia_system>>x_multimedia_system>>1.2.10

cpe:2.3:a:x_multimedia_system:x_multimedia_system:1.2.10:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

Vendor Statements

Organization : Red Hat

Last Modified : 2008-04-04T00:00:00

Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=228013 The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.

References

Hyperlink	Source	Resource
http://secunia.com/advisories/23986	PSIRT-CNA@flexerasoftware.com	N/A
http://secunia.com/advisories/24645	PSIRT-CNA@flexerasoftware.com	N/A
http://secunia.com/advisories/24804	PSIRT-CNA@flexerasoftware.com	N/A
http://secunia.com/advisories/24889	PSIRT-CNA@flexerasoftware.com	N/A
http://secunia.com/secunia_research/2007-47/advisory/	PSIRT-CNA@flexerasoftware.com	Vendor Advisory
http://www.debian.org/security/2007/dsa-1277	PSIRT-CNA@flexerasoftware.com	N/A
http://www.mandriva.com/security/advisories?name=MDKSA-2007:071	PSIRT-CNA@flexerasoftware.com	N/A
http://www.novell.com/linux/security/advisories/2007_6_sr.html	PSIRT-CNA@flexerasoftware.com	N/A
http://www.securityfocus.com/archive/1/463408/100/0/threaded	PSIRT-CNA@flexerasoftware.com	N/A
http://www.securityfocus.com/bid/23078	PSIRT-CNA@flexerasoftware.com	N/A
http://www.ubuntu.com/usn/usn-445-1	PSIRT-CNA@flexerasoftware.com	N/A
http://www.vupen.com/english/advisories/2007/1057	PSIRT-CNA@flexerasoftware.com	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/33205	PSIRT-CNA@flexerasoftware.com	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History