CVE-2007-6478: Rosoftengineering Rosoft Media Player

Medium severity, CVSS 6.8. EPSS: 5.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Rosoft Media Player 4.1.7, 4.1.8, and possibly earlier versions allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in a .M3U file. NOTE: some of these details are obtained from third party information.

Affected products

• Rosoftengineering Rosoft Media Player: up to and including 4.1.8; version 4.1.7 only

Published 2007-12-20. Last modified 2026-06-16.