Approved changes feed: RSS · Atom

cpe:2.3:a:claudio_matsuoka:extended_module_player:2.5.0:*:*:*:*:*:*:*

part: a version: 2.5.0 update: *

VendorClaudio Matsuoka (060a3af1-9ee9-5954-a51d-7d40ac2a9b40)
ProductExtended Module Player (e5f03d42-5c4c-5b53-a59a-0e4db61c33f0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libxmp purl2cpe 2026-06-01 10:12:18.097791
pkg:deb/ubuntu/libxmp purl2cpe 2026-06-01 10:12:18.097793
pkg:github/libxmp/libxmp purl2cpe 2026-06-01 10:12:18.097794
pkg:rpm/fedora/libxmp purl2cpe 2026-06-01 10:12:18.097795
pkg:rpm/opensuse/libxmp purl2cpe 2026-06-01 10:12:18.097797

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-6732 vulnerable 2026-06-08 04:50:09.674867 Details available
Multiple buffer overflows in the dtt_load function in loaders/dtt_load.c Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors related to an untrusted length value and the (1) pofs and (2) plen arrays.
Published: 2009-09-13T22:00:00.000Z
Updated: 2024-09-16T22:30:57.135Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6731 vulnerable 2026-06-08 04:50:09.674277 Details available
Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in (1) test_oxm and (2) decrunch_oxm functions in misc/oxm.c, leading to a buffer overflow.
Published: 2009-09-13T22:00:00.000Z
Updated: 2024-09-17T02:57:50.876Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.