Is CVE-2007-6718 actively exploited?

No active exploitation of CVE-2007-6718 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2007-6718 be exploited remotely?

Yes. CVE-2007-6718 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2007-6718?

CVE-2007-6718 has a CVSS score of 4.3 (MEDIUM).

HOME VULNERABILITIESCVE-2007-6718

MEDIUM

CVE-2007-6718

NVD-CWE-OtherPublished: October 20, 2008· Updated: Jun 16, 2026

4.3

CVSS v3.1

Official Description

MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service (SIGSEGV and application crash) via (1) a malformed MP3 file, as demonstrated by lol-mplayer.mp3; (2) a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; (3) a malformed MPEG-1 file, as demonstrated by lol-mplayer.mpg; (4) a malformed MPEG-2 file, as demonstrated by lol-mplayer.m2v; (5) a malformed MPEG-4 AVI file, as demonstrated by lol-mplayer.avi; (6) a malformed FLAC file, as demonstrated by lol-mplayer.flac; (7) a malformed Ogg Theora file, as demonstrated by lol-mplayer.ogm; (8) a malformed WMV file, as demonstrated by lol-mplayer.wmv; or (9) a malformed AAC file, as demonstrated by lol-mplayer.aac. NOTE: vector 5 might overlap CVE-2007-4938, and vector 6 might overlap CVE-2008-0486.

NVD Source

Technical Analysis

CVE-2007-6718 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.