CVE-2011-1761 Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in libmodplug before 0.8.8.3 allow remote attackers to cause a denial of service (cr...
MediumCVSS 6.8
EPSS 11.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in libmodplug before 0.8.8.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ABC file. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libmodplug(Debian:12) | < 1:0.8.8.4-1 | 1:0.8.8.4-1 |
| debian/libmodplug(Debian:13) | < 1:0.8.8.4-1 | 1:0.8.8.4-1 |
| debian/libmodplug(Debian:14) | < 1:0.8.8.4-1 | 1:0.8.8.4-1 |
| konstanty bialkowski libmodplug | <= 0.8.8.2 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.4 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.5 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.6 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.7 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.8 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.8.1 | No fix listed |
References
- Debian Security Tracker CVE-2011-1761 vendor-advisory
- bugs.debian.org issue-tracking
- openSUSE-SU-2011:0551 vendor-advisory
- openSUSE-SU-2011:0943 vendor-advisory
- 44388 third-party-advisory vendor-advisory
- 44695 third-party-advisory vendor-advisory
- 44870 third-party-advisory vendor-advisory
- 45742 third-party-advisory vendor-advisory
- 48058 third-party-advisory vendor-advisory
- USN-1148-1 vendor-advisory
- DSA-2415 vendor-advisory
- 17222 exploit
- [oss-security] 20120502 CVE request: libmodplugin stack-buffer overflow mailing-list
- [oss-security] 20120502 Re: CVE request: libmodplugin stack-buffer overflow mailing-list
- 72157 vdb-entry