Back to feed
EUVD-2011-2888 · Published Jun 7, 2012
Off-by-one error in the CSoundFile::ReadAMS2 function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted AMS file with a large number of instruments.
Technologies
Konstanty_Bialkowski Libmodplug
Weaknesses
CWE-189
CVSS scores
- v2.06.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://jira.atheme.org/browse/AUDPLUG-394
- http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063786.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066044.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html
- http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms%3Ba=commitdiff%3Bh=16d7a78efe14d345a6c5b241f88422ad0ee483ea
- http://rhn.redhat.com/errata/RHSA-2011-1264.html
Potentially impacted assets
See if this affects your attack surface
