CVE-2007-6533
Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to...
Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a PLS file in a crafted ZPL file, which causes an overflow in Unicode handling when generating an error message.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a PLS file in a crafted ZPL file, which causes an overflow in Unicode handling when generating an error message.
- Record
CVE-2007-6533- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a PLS file in a crafted ZPL file, which causes an overflow in Unicode handling when generating an error message.
- Record
CVE-2007-6533- Updated
- 2026-11-02
EUVDEUVD-2007-6499 No score
Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a PLS file in a crafted ZPL file, which causes an overflow in Unicode handling when generating an error message.
- Record
EUVD-2007-6499- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ph3w-x7gh-6cqw No score
Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to...
Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a PLS file in a crafted ZPL file, which causes an overflow in Unicode handling when generating an error message.
- Record
GHSA-ph3w-x7gh-6cqw- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Zoom Player 3.30/5/6 - '.ZPL' Error Message Arbitrary Code Execution | 2007-12-24 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6533 is a high vulnerability (CVSS 7.5) in Inmatrix Zoom Player, published December 27, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 12.3%, the 96th percentile. No source names a fixed version.