CVE-2007-4535: Vavoom

Medium severity, CVSS 4.3. EPSS: 5.2% chance of exploitation in the next 30 days.

The VStr::Resize function in str.cpp in Vavoom 1.24 and earlier allows remote attackers to cause a denial of service (daemon crash) via a string with a negative NewLen value within a certain UDP packet that triggers an assertion error.

Affected products

• Vavoom Vavoom: up to and including 1.24

Published 2007-08-25. Last modified 2026-06-16.