CVE-2007-6328: DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system...

Security readout for executives and security teams

This old DOSBox issue concerns whether a local user running DOSBox 0.72 or earlier can reach the host filesystem through DOSBox's mount feature. The vendor reportedly said this was not a security problem, so business urgency depends on whether DOSBox is used as a boundary for untrusted users. Exposure is most plausible on shared systems, kiosks, labs, or sandbox-like setups where untrusted local users can run DOSBox and administrators expect DOSBox to isolate host files. Prioritize only where DOSBox is exposed to untrusted local users or used as a containment layer. For ordinary single-user desktop use, the available sources do not support emergency treatment. Mitigation focus: Do not treat DOSBox as a host filesystem security boundary.; Restrict DOSBox use to trusted local users where possible.; Review vendor and distribution guidance for supported DOSBox versions..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.