Heap-Based Buffer Overflow in Libmodplug Affects VLC Media Player
CVE-2013-4234

Currently unrated

Key Information:

Vendor: Konstanty Bialkowski
Status: LIBModplug; Debian Linux
Vendor: CVE Published:; 16 September 2013

🔔 Create Konstanty Bialkowski Vulnerability Alert

What is CVE-2013-4234?

Multiple heap-based buffer overflows can occur in the abc_MIDI_drum and abc_MIDI_gchord functions in the load_abc.cpp file within libmodplug versions up to 0.8.8.4. These weaknesses may be exploited by remote attackers triggering memory corruption and crashes, potentially leading to arbitrary code execution via specially crafted ABC files.

References

http://www.debian.org/security/2013/dsa-2751

vendor-advisoryx_refsource_DEBIAN

http://blog.scrt.ch/2013/07/24/vlc-abc-parsing-seems-to-b...

x_refsource_MISC

http://secunia.com/advisories/54388

third-party-advisoryx_refsource_SECUNIA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 16, 2013
Vulnerability Reserved
Jun 12, 2013

CVE-2013-4234 Data

JSON