Exploitation Summary
CVE-2007-6144 has been observed exploited in the wild (reported by VulnCheck KEV).
Description
Heap-based buffer overflow in the PPlayer.XPPlayer.1 ActiveX control in pplayer.dll_1_work in Xunlei Thunder 5.7.4.401 allows remote attackers to execute arbitrary code via a long string in a FlvPlayerUrl property value. NOTE: some of these details are obtained from third party information.
References (6)
Core 6
Core References
Exploit x_refsource_misc
http://www.nohack.cn/hacknews/20071119/1916.html
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3982
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/39680
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/26536
Exploit x_refsource_misc
http://www.sebug.net/exploit/2575
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27795
Scores
EPSS
0.0332
EPSS Percentile
87.2%
Details
VulnCheck KEV
2011-09-01
CWE
CWE-119
Status
published
Products (1)
xunlei/web_thunder
5.7.4 401
Published
Nov 27, 2007
Tracked Since
Feb 18, 2026