Off-by-one Error in libmodplug Affects Multiple Linux Distributions
CVE-2011-2913

Currently unrated

Key Information:

Vendor: Konstanty Bialkowski
Status: LIBModplug
Vendor: CVE Published:; 7 June 2012

🔔 Create Konstanty Bialkowski Vulnerability Alert

What is CVE-2011-2913?

An off-by-one error in the CSoundFile::ReadAMS function within the libmodplug library prior to version 0.8.8.4 allows remote attackers to exploit crafted AMS files to trigger stack memory corruption. This vulnerability poses a risk of denial of service and may allow the execution of arbitrary code, exploiting the library's handling of specific input data with an excessive number of samples. Users and administrators are advised to update to the fixed version to mitigate potential threats.

References

http://lists.fedoraproject.org/pipermail/package-announce...

vendor-advisoryx_refsource_FEDORA

http://www.openwall.com/lists/oss-security/2011/08/10/4

mailing-listx_refsource_MLIST

http://www.debian.org/security/2012/dsa-2415

vendor-advisoryx_refsource_DEBIAN

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 7, 2012
Vulnerability Reserved
Jul 27, 2011

CVE-2011-2913 Data

JSON