Unrated severityNVD Advisory· Published Feb 21, 2007· Updated Jun 16, 2026

CVE-2007-1035

Description

Unspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the Mediafield and Audio modules for Drupal, allows remote attackers to read and delete arbitrary files, list arbitrary directories, and write to empty files or .mp3 files via unknown vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Getid3/Getid3llm-fuzzy
Range: =1.7.1
Drupal/Audio Module
cpe:2.3:a:drupal:audio_module:*:*:*:*:*:*:*:*
Drupal/Getid3
cpe:2.3:a:drupal:getid3:1.7.1:*:*:*:*:*:*:*
Drupal/Mediafield Module
cpe:2.3:a:drupal:mediafield_module:*:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

drupal.org/node/119385nvdPatchVendor Advisory
www.securityfocus.com/bid/22587nvdPatch
blamcast.net/articles/highly-critical-security-flaws-in-drupal-audio-modulenvd
osvdb.org/35161nvd
www.vupen.com/english/advisories/2007/0635nvd
exchange.xforce.ibmcloud.com/vulnerabilities/32542nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000