CVE-2007-0653
UnknownEPSS 6.48%
Last modified
CVE-2007-0653 is a vulnerability of currently unknown severity. Integer overflow in X MultiMedia System (xmms) 1.2.10, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via crafted header information in a skin bitmap image, which triggers memory corruption.. EPSS estimates a 6.48% chance of exploitation in the next 30 days.
Description
Integer overflow in X MultiMedia System (xmms) 1.2.10, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via crafted header information in a skin bitmap image, which triggers memory corruption.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| X Multimedia System | X Multimedia System | 1.2.10 |
References
- http://secunia.com/secunia_research/2007-47/advisory/Vendor Advisory
- http://secunia.com/secunia_research/2007-47/advisory/Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-0653?
Integer overflow in X MultiMedia System (xmms) 1.2.10, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via crafted header information in a skin bitmap image, which triggers memory corruption.
How severe is CVE-2007-0653?
Severity scoring for CVE-2007-0653 is pending analysis. The EPSS model estimates a 6.48% probability of exploitation in the next 30 days.
How do I fix CVE-2007-0653?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-0647Format string vulnerability in Help Viewer 3.0.0 allows remo…
- CVE-2007-0648Cisco IOS after 12.3(14)T, 12.3(8)YC1, 12.3(8)YG, and 12.4, …
- CVE-2007-0649Variable overwrite vulnerability in interface/globals.php in…
- CVE-2007-0650Buffer overflow in the open_sty function in mkind.c for make…
- CVE-2007-0651Multiple cross-site scripting (XSS) vulnerabilities in MailE…
- CVE-2007-0652Cross-site request forgery (CSRF) vulnerability in MailEnabl…
- CVE-2007-0654Integer underflow in X MultiMedia System (xmms) 1.2.10 allow…
- CVE-2007-0655The MicroWorld Agent service (MWAGENT.EXE) in MicroWorld Tec…
- CVE-2007-0656PHP remote file inclusion vulnerability in includes/function…
- CVE-2007-0657Unspecified vulnerability in Nexuiz 2.2.2 allows remote atta…
- CVE-2007-0658The (1) Textimage 4.7.x before 4.7-1.2 and 5.x before 5.x-1.…
- CVE-2007-0659download.php in the MuddyDogPaws FileDownload snippet before…
Are you affected by CVE-2007-0653?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST