Stack-based Buffer Overflow Vulnerability in libmodplug Affects Multiple Platforms
CVE-2011-1574

Currently unrated

Key Information:

Vendor: Konstanty Bialkowski
Status: LIBModplug
Vendor: CVE Published:; 9 May 2011

🔔 Create Konstanty Bialkowski Vulnerability Alert

What is CVE-2011-1574?

A stack-based buffer overflow vulnerability exists in the ReadS3M method within load_s3m.cpp in libmodplug versions prior to 0.8.8.2. This flaw can be exploited by remote attackers through specially crafted S3M files, potentially allowing them to execute arbitrary code on the affected system. This vulnerability poses a significant risk as it can be triggered by users opening or interacting with malicious audio files.

References

https://www.ubuntu.com/usn/USN-1148-1/

vendor-advisoryx_refsource_UBUNTU

http://openwall.com/lists/oss-security/2011/04/11/13

mailing-listx_refsource_MLIST

http://www.gentoo.org/security/en/glsa/glsa-201203-16.xml

vendor-advisoryx_refsource_GENTOO

EPSS Score

42% chance of being exploited in the next 30 days.

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 9, 2011
Vulnerability Reserved
Apr 5, 2011

CVE-2011-1574 Data

JSON