CVE-2007-3121: Zapping Vbi Library

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

Buffer overflow in the CCdecode function in contrib/ntsc-cc.c in the zvbi-ntsc-cc tool in Zapping VBI Library (ZVBI) before 0.2.25 allows attackers to cause a denial of service (application crash) and possibly execute arbitrary code via long data during a reception error. NOTE: some of these details are obtained from third party information.

Affected products

• Zapping Zapping Vbi Library: version 0.2.20 only; version 0.2.21 only; version 0.2.22 only; version 0.2.23 only; version 0.2.24 only

Published 2007-06-07. Last modified 2026-06-16.