CVE-2007-6558

Published: Dec 28, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

TotalPlayer 3.0 allows user-assisted remote attackers to cause a denial of service (application crash) via a large .m3u file. NOTE: this might be a duplicate of CVE-2006-6288.

Affected (1)

Products: Totalplayer: Totalplayer

Totalplayer

1 product

Totalplayer

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Totalplayer Totalplayer	Version 3.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (20)

http://osvdb.org/39891

Source: cve@mitre.org

http://secunia.com/advisories/28236

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/3500

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/485513/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/485547/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/485564/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/485578/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/27021

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/4322

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/39227

Source: cve@mitre.org

http://osvdb.org/39891