VULNERABILITY INTELLIGENCE

CVE-2007-0949

CVSS score10 HIGH
EPSS probability16.38%
CISA KEVNot currently listed
Published2007-02-15
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected.

Primary references