Unrated severityNVD Advisory· Published Dec 20, 2007· Updated Apr 23, 2026
CVE-2007-6478
CVE-2007-6478
Description
Stack-based buffer overflow in Rosoft Media Player 4.1.7, 4.1.8, and possibly earlier versions allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in a .M3U file. NOTE: some of these details are obtained from third party information.
Affected products
2cpe:2.3:a:rosoftengineering:rosoft_media_player:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:rosoftengineering:rosoft_media_player:*:*:*:*:*:*:*:*range: <=4.1.8
- cpe:2.3:a:rosoftengineering:rosoft_media_player:4.1.7:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- www.securityfocus.com/bid/26920nvdExploit
- secunia.com/advisories/28144nvdVendor Advisory
- www.vupen.com/english/advisories/2007/4259nvdVendor Advisory
- securityreason.com/securityalert/3470nvd
- www.osvdb.org/39501nvd
- www.securityfocus.com/archive/1/485253/100/0/threadednvd
- www.securityfocus.com/archive/1/488131/100/200/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/39114nvd
- www.exploit-db.com/exploits/5122nvd
News mentions
0No linked articles in our index yet.