Buffer Overflow Vulnerability in Next Generation Software Virtual DJ 5.0
CVE-2007-4735

Currently unrated

Key Information:

Vendor

Next Generation Software

Status
Virtual Dj \(vdj\)
Vendor
CVE Published:
6 September 2007

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2007-4735?

A buffer overflow vulnerability exists in Next Generation Software's Virtual DJ version 5.0, which allows user-assisted remote attackers to execute arbitrary code. This exploitation occurs when an attacker uses an excessively long file path in an m3u file. Users of Virtual DJ should be aware of this risk and ensure they are following best practices to mitigate potential threats.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2007-4735 - Proof of Concept

References

http://www.securityfocus.com/bid/25513
vdb-entryx_refsource_BID
http://www.securityfocus.com/bid/25512
vdb-entryx_refsource_BID
http://secunia.com/advisories/26665
third-party-advisoryx_refsource_SECUNIA

EPSS Score

6% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.