CVE-2007-5064: Xunlei Web Thunder

Medium severity, CVSS 6.8. EPSS: 3.9% chance of exploitation in the next 30 days.

Buffer overflow in a certain ActiveX control in Xunlei Web Thunder 5.6.9.344, possibly the DapPlayer ActiveX control in DapPlayer_Now.dll, allows remote attackers to execute arbitrary code via a long first argument to the DownURL2 method. NOTE: some of these details are obtained from third party information.

Affected products

• Xunlei Web Thunder: version 5.6.9.344 only

Published 2007-09-24. Last modified 2026-06-16.