Integer Overflow Vulnerability in libmodplug Affects Sound Processing
CVE-2011-2911

Currently unrated

Key Information:

Vendor: Konstanty Bialkowski
Status: LIBModplug
Vendor: CVE Published:; 7 June 2012

🔔 Create Konstanty Bialkowski Vulnerability Alert

What is CVE-2011-2911?

The libmodplug library, utilized in sound file processing, has an integer overflow vulnerability in the CSoundFile::ReadWav function. This flaw allows attackers to craft malicious WAV files that can trigger a heap-based buffer overflow, potentially leading to a denial of service or execution of arbitrary code. Users with versions prior to 0.8.8.4 are particularly at risk, emphasizing the need for an upgrade to mitigate these security threats.

References

http://lists.fedoraproject.org/pipermail/package-announce...

vendor-advisoryx_refsource_FEDORA

http://www.openwall.com/lists/oss-security/2011/08/10/4

mailing-listx_refsource_MLIST

http://www.debian.org/security/2012/dsa-2415

vendor-advisoryx_refsource_DEBIAN

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 7, 2012
Vulnerability Reserved
Jul 27, 2011

CVE-2011-2911 Data

JSON