Read the docs
TI-2007-04804 Aliases CVE-2007-4983GHSA-mv9m-4996-x55r

Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in…

Priority HIGH 73CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic and 7.0.3.3016 allows remote attackers to create or overwrite arbitrary local files via a ..\ (dot dot backslash) in the second argument to the DownloadFromMusicStore method. NOTE: some of these details are obtained from third party information. NOTE: this can be leveraged for code execution by overwriting JetAudio.exe, which is launched by the control after completion of the method call.

Why it matters now

EPSS 0.47261 98th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:cowon_america:jetaudio:7.0.3.3016:*:*:*:*:*:*:*7.0.3.3016VulnerableCowon America
cpe:2.3:a:cowon_america:jetaudio:7.0.3_basic:*:*:*:*:*:*:*7.0.3_basicVulnerableCowon America
  • cpe:2.3:a:cowon_america:jetaudio:7.0.3.3016:*:*:*:*:*:*:* Versions 7.0.3.3016 Vulnerable ·Cowon America
  • cpe:2.3:a:cowon_america:jetaudio:7.0.3_basic:*:*:*:*:*:*:* Versions 7.0.3_basic Vulnerable ·Cowon America

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2007-4983
  2. 2026-10-03 Alias added: GHSA-mv9m-4996-x55r

References

Exploit 1

Other 2

  • TI-2009-04424 Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15… CVSS 2.0HIGH 9.3
  • TI-2007-05273 Stack-based buffer overflow in COWON America jetAudio Basic 7.0.3 allows user-assisted… CVSS 2.0HIGH 9.3
  • TI-2009-04432 Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15… CVSS 2.0HIGH 9.3
  • TI-2006-02817 Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows… CVSS 2.0MEDIUM 5.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences