CVE-2011-1574 Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file.
MediumCVSS 6.8
EPSS 42.9%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| konstanty bialkowski libmodplug | <= 0.8.8.1 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.4 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.5 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.6 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.7 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.8 | No fix listed |
| debian/libmodplug(Debian:12) | < 1:0.8.8.2-1 | 1:0.8.8.2-1 |
| debian/libmodplug(Debian:13) | < 1:0.8.8.2-1 | 1:0.8.8.2-1 |
| debian/libmodplug(Debian:14) | < 1:0.8.8.2-1 | 1:0.8.8.2-1 |
References
- Debian Security Tracker CVE-2011-1574 vendor-advisory
- bugs.debian.org issue-tracking
- bugs.debian.org patch
- modplug-xmms.git.sourceforge.net
- [oss-security] 20110411 Re: CVE request for libmodplug exploit mailing-list patch
- [oss-security] 20110411 CVE request for libmodplug exploit mailing-list patch
- 44870 third-party-advisory
- 48434 third-party-advisory
- 8243 third-party-advisory
- 1025480 vdb-entry
- DSA-2226 vendor-advisory
- GLSA-201203-16 vendor-advisory
- MDVSA-2011:085 vendor-advisory
- bugzilla.redhat.com exploit patch
- RHSA-2011:0477 vendor-advisory
- www.sec-consult.com exploit
- USN-1148-1 vendor-advisory