Every CVE Search/ Get API key

CVE-2007-4735

Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0 allows user-assisted remote...

9.3 HighPublic exploit

Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0 allows user-assisted remote attackers to execute arbitrary code via a long file path in an m3u file.

Exploit likelihood

6.98%Down 8.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0 allows user-assisted remote attackers to execute arbitrary code via a long file path in an m3u file.

Record
CVE-2007-4735
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0 allows user-assisted remote attackers to execute arbitrary code via a long file path in an m3u file.

Record
CVE-2007-4735
Updated
2026-11-02
EUVDEUVD-2007-4716 No score

Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0 allows user-assisted remote attackers to execute arbitrary code via a long file path in an m3u file.

Record
EUVD-2007-4716
Updated
2026-11-03
GitHub AdvisoriesGHSA-522x-44vv-3p4m No score

Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0 allows user-assisted remote...

Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0 allows user-assisted remote attackers to execute arbitrary code via a long file path in an m3u file.

Record
GHSA-522x-44vv-3p4m
Weakness
CWE-119
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBVirtual DJ 5.0 - '.m3u' Local Buffer Overflow2007-09-02

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-4735 is a high vulnerability (CVSS 9.3) in Next Generation Software Virtual Dj \(vdj\), published September 6, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.98%, the 94th percentile. No source names a fixed version.

References

MoveEnter Open