CVE-2007-6609: Coolplayer

Medium severity, CVSS 5.0. EPSS: 5.2% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in the CPLI_ReadTag_OGG function in CPI_PlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long (1) cTag or (2) cValue field in an OGG Vorbis file.

Affected products

• Coolplayer Coolplayer: version 217 only

Published 2007-12-31. Last modified 2026-06-16.