Off-by-One Error in libmodplug Affects Multiple Vendors
CVE-2011-2915

Currently unrated

Key Information:

Vendor: Konstanty Bialkowski
Status: LIBModplug
Vendor: CVE Published:; 7 June 2012

🔔 Create Konstanty Bialkowski Vulnerability Alert

What is CVE-2011-2915?

An off-by-one error exists in the CSoundFile::ReadAMS2 function of the libmodplug library prior to version 0.8.8.4. This flaw allows remote attackers to manipulate crafted AMS files containing a large number of instruments, potentially leading to memory corruption. In the worst-case scenario, such exploitation could enable an attacker to execute arbitrary code on the affected system, thereby compromising its integrity and security.

References

http://lists.fedoraproject.org/pipermail/package-announce...

vendor-advisoryx_refsource_FEDORA

http://www.openwall.com/lists/oss-security/2011/08/10/4

mailing-listx_refsource_MLIST

http://www.debian.org/security/2012/dsa-2415

vendor-advisoryx_refsource_DEBIAN

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 7, 2012
Vulnerability Reserved
Jul 27, 2011

CVE-2011-2915 Data

JSON