CVE-2007-6328
** DISPUTED ** DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on...
CVE-2007-6328 is a high vulnerability (CVSS 7.2) in Dosbox, published December 13, 2007. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. Fixed in dosbox 0.72-1.
DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem
Exploit likelihood
What each source reports
NVD Score used
DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem
- Record
CVE-2007-6328- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem
- Record
CVE-2007-6328- Updated
- 2026-11-02
EUVDEUVD-2007-6295 No score
DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem
- Record
EUVD-2007-6295- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m882-wm83-jrj3 No score
** DISPUTED ** DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on...
** DISPUTED ** DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem.
- Record
GHSA-m882-wm83-jrj3- Updated
- 2026-11-02
OSV No score
DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem
- Record
CVE-2007-6328- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-6328 No score
DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem
- Record
DEBIAN-CVE-2007-6328- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | affected, aliases, facts, references, title | GitHub Advisories, OSV |
| 2026-11-02 | created | CVE List, NVD |