Integer Overflow in LibModPlug Affects Multimedia Software
CVE-2013-4233

Currently unrated

Key Information:

Vendor: Konstanty Bialkowski
Status: LIBModplug; Debian Linux
Vendor: CVE Published:; 16 September 2013

🔔 Create Konstanty Bialkowski Vulnerability Alert

What is CVE-2013-4233?

An integer overflow has been identified in the abc_set_parts function within load_abc.cpp of LibModPlug, version 0.8.8.4 and earlier. This vulnerability can be exploited by remote attackers through the use of a specially crafted P header in ABC files. The exploit could lead to a denial of service condition and may also allow the execution of arbitrary code due to the heap-based buffer overflow triggered during the processing of these files.

References

http://www.debian.org/security/2013/dsa-2751

vendor-advisoryx_refsource_DEBIAN

http://blog.scrt.ch/2013/07/24/vlc-abc-parsing-seems-to-b...

x_refsource_MISC

http://secunia.com/advisories/54388

third-party-advisoryx_refsource_SECUNIA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Oct 3, 2022
Vulnerability published
Sep 16, 2013

CVE-2013-4233 Data

JSON