CVE-2007-4337: Streamripper

Medium severity, CVSS 5.8. EPSS: 3.5% chance of exploitation in the next 30 days.

Multiple buffer overflows in the httplib_parse_sc_header function in lib/http.c in Streamripper before 1.62.2 allow remote attackers to execute arbitrary code via long (1) Location and (2) Server HTTP headers, a different vulnerability than CVE-2006-3124.

Affected products

• Streamripper Streamripper: version 1.61.1 only; version 1.61.17 only; version 1.61.24 only; version 1.61.25 only; version 1.61.26 only; version 1.62 only

Published 2007-08-14. Last modified 2026-06-16.