CVE-2007-6537: Winuae

Medium severity, CVSS 6.8. EPSS: 6.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the zfile_gunzip function in zfile.c in WinUAE 1.4.4 and earlier allows user-assisted remote attackers to execute arbitrary code via a long filename in a gzipped archive, such as a (1) gz, (2) adz, (3) roz, or (4) hdz archive in a compressed floppy disk image.

Affected products

• Winuae Winuae: version 1.4.4 only

Published 2007-12-27. Last modified 2026-06-16.