CVE-2007-6720
Estado: ModificadaMedia (4.3)—
libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
- Puntuación base: 4.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.34%
- Percentil entre todas las CVEs puntuadas: 83
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-Other
Referencias
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=422021
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=461519
- http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html
- http://openwall.com/lists/oss-security/2009/01/13/2
- http://secunia.com/advisories/34259
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/33235
- https://bugzilla.redhat.com/show_bug.cgi?id=479829
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01305.html
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01312.html
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=422021
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=461519
- http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html
- http://openwall.com/lists/oss-security/2009/01/13/2
- http://secunia.com/advisories/34259
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/33235
- https://bugzilla.redhat.com/show_bug.cgi?id=479829
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01305.html
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01312.html
JSON original (NVD)
Mostrar
{
"id": "CVE-2007-6720",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2009-01-20T16:30:00.203",
"references": [
{
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=422021",
"source": "cve@mitre.org"
},
{
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=461519",
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html",
"source": "cve@mitre.org"
},
{
"url": "http://openwall.com/lists/oss-security/2009/01/13/2",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/34259",
"source": "cve@mitre.org"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/33235",
"source": "cve@mitre.org"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=479829",
"source": "cve@mitre.org"
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01305.html",
"source": "cve@mitre.org"
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01312.html",
"source": "cve@mitre.org"
},
{
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=422021",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=461519",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://openwall.com/lists/oss-security/2009/01/13/2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/34259",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/33235",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=479829",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01305.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01312.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels."
},
{
"lang": "es",
"value": "libmikmod v3.1.9 hasta v3.2.0, utilizado por MikMod, SDL-mixer, y posiblemente otros productos, se basa en los canales de la última canción cargada, en lugar de la canción que se está reproduciendo, para ciertos cálculos de la reproducción, lo que permite a atacantes asistidos por el usuario provocar una denegación de servicio (caída de aplicación)cargando multiples canciones (también conocido como ficheros MOD) con diferentes números de canales."
}
],
"lastModified": "2026-06-16T22:48:38.607",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.1.9-1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "436CE81E-616B-40E4-825A-961EC9672896"
},
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.1.9-2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1C4E395-10DE-42A4-830C-803CE1F79F7A"
},
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.1.9-3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4593CEA9-5661-4F3C-B38B-369FD2043D7F"
},
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.1.9-4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D05D8EDA-FE5E-483A-AC78-DAFE129705C5"
},
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.1.9-5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CA7EDD1-5C30-41E8-B93A-F2C5FA754F64"
},
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.1.9-6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0F92EE1-D5F8-47A3-B674-A593A7829DD0"
},
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.1.10-1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F1448EB-FDFC-434A-ACE9-F6CC52B523E6"
},
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.1.10-2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6B9F0C8-15C0-47BF-AE69-2216A65D1D48"
},
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.1.10-3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0524F58-BC45-4A81-BB99-F09F03047665"
},
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.1.10-4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA48214A-CF42-4378-A422-803EDE5632CF"
},
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.1.10-5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F08B9B6-0CCD-4388-B33A-98F6A65FAEF0"
},
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.1.11-1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A0D92BE-E4F7-42CF-AA61-71CD46319E2E"
},
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.1.11-2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "563D3D39-DAFB-4F0C-BCBB-917C5082137F"
},
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.1.11-3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA98B82C-B0BD-4546-8047-63ECDCA27B4B"
},
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.1.11-4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE994EED-EA67-4A52-9AAD-30259DCD8C1E"
},
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.1.11-5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB091C37-6020-4202-AC51-B597C2890E68"
},
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.1.11-6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F88BF46A-B01D-4D8E-8BFF-6E864EBA5FE8"
},
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.1.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31AA2232-8FB5-4BA3-BBB1-B54443C2D57C"
},
{
"criteria": "cpe:2.3:a:igno_saitz:libmikmod:3.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B88DA6E-D815-4904-AE07-5C54E72057AA"
}
],
"operator": "OR"
}
]
}
],
"vendorComments": [
{
"comment": "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-6720\n\nThe Red Hat Security Response Team has rated this issue as having low security\nimpact, a future update may address this flaw. More information regarding\nissue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/",
"lastModified": "2009-01-21T00:00:00",
"organization": "Red Hat"
}
],
"sourceIdentifier": "cve@mitre.org"
}