Stack-Based Buffer Overflow in CSoundFile for libmodplug Products
CVE-2011-2912

Currently unrated

Key Information:

Vendor: Konstanty Bialkowski
Status: LIBModplug
Vendor: CVE Published:; 7 June 2012

🔔 Create Konstanty Bialkowski Vulnerability Alert

What is CVE-2011-2912?

A stack-based buffer overflow vulnerability exists in the CSoundFile::ReadS3M function of libmodplug before version 0.8.8.4. This issue allows remote attackers to exploit crafted S3M files containing invalid offsets, potentially leading to denial of service and the possibility of executing arbitrary code. The flaw emphasizes the importance of validating input received from external S3M files to prevent such exploitation.

References

http://lists.fedoraproject.org/pipermail/package-announce...

vendor-advisoryx_refsource_FEDORA

http://www.openwall.com/lists/oss-security/2011/08/10/4

mailing-listx_refsource_MLIST

http://www.debian.org/security/2012/dsa-2415

vendor-advisoryx_refsource_DEBIAN

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 7, 2012
Vulnerability Reserved
Jul 27, 2011

CVE-2011-2912 Data

JSON