Integer Overflow Vulnerability in libmodplug Affecting Multiple Products
CVE-2009-1438

Currently unrated

Key Information:

Vendor: Konstanty Bialkowski
Status: LIBModplug
Vendor: CVE Published:; 27 April 2009

🔔 Create Konstanty Bialkowski Vulnerability Alert

What is CVE-2009-1438?

The integer overflow vulnerability in the CSoundFile::ReadMed function of libmodplug allows attackers to execute arbitrary code by exploiting crafted MED files. This occurs when processing specific song comments or names, leading to a heap-based buffer overflow. Various products, including gstreamer-plugins and TTPlayer, are impacted, with potential risks that have been observed in real-world attacks.

References

http://osvdb.org/53801

vdb-entryx_refsource_OSVDB

http://www.ubuntu.com/usn/USN-771-1

vendor-advisoryx_refsource_UBUNTU

http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xm...

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 27, 2009
Vulnerability Reserved
Apr 27, 2009

CVE-2009-1438 Data

JSON