CVE-2007-6328
** DISPUTED ** DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on...
CVE-2007-6328 is a high vulnerability (CVSS 7.2) in Dosbox, published December 13, 2007. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. Fixed in dosbox 0.72-1.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 0.34%EPSS, 28th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.72-1dosbox +2 more
Description
DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem
- Record
CVE-2007-6328- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem
- Record
CVE-2007-6328- Updated
- 2026-11-02
EUVDEUVD-2007-6295No score
DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem
- Record
EUVD-2007-6295- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m882-wm83-jrj3No score
** DISPUTED ** DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on...
** DISPUTED ** DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem.
- Record
GHSA-m882-wm83-jrj3- Updated
- 2026-11-02
OSVNo score
DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem
- Record
CVE-2007-6328- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-6328No score
DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem
- Record
DEBIAN-CVE-2007-6328- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.