Buffer overflow in AtomixMP3 2.3 allows user-assisted remote attackers to execute arbitrary code via long strings in file and title fields…

Published 19 y ago 2007-09-11 · modified 4 mo ago 2026-06-16 · JSON

CVSS

6.8

v2.0 · NVD

CISA KEV

not known exploited

EPSS

3.9%

percentile 90%

Public exploits

Exploit-DB

Buffer overflow in AtomixMP3 2.3 allows user-assisted remote attackers to execute arbitrary code via long strings in file and title fields in a .pls file, as demonstrated by the (1) File1 and (2) Title1 fields, different vectors than CVE-2006-6287 and CVE-2007-2487.

Exploit prediction (EPSS)

3.89% probability of exploitation in the next 30 days, higher than 90% of all scored CVEs.

Exploits and detections

EDB-8312 AtomixMP3 < 2.3 - 'Playlist' Universal Overwrite (SEH) · local · 2009-03-30
EDB-4364 AtomixMP3 2.3 - '.pls' Local Buffer Overflow · local · 2007-09-05

CVSS scores

Assigned by	Version	Score	Vector
NVD	2.0	6.8	`AV:N/AC:M/Au:N/C:P/I:P/A:P`

Classification

Weakness

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

osvdb.org /45889 · vdb-entry, x_refsource_OSVDB, x_transferred
exploit-db.com /exploits/4364 · exploit, x_refsource_EXPLOIT-DB, x_transferred
securityfocus.com /bid/25546 · vdb-entry, x_refsource_BID, x_transferred

Sources

CVE List: CVE-2007-4803
NVD: CVE-2007-4803

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.