CVE-2011-2913 Off-by-one error in the CSoundFile::ReadAMS function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (stack memory corruption) and possibly execut...
MediumCVSS 6.8
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Off-by-one error in the CSoundFile::ReadAMS function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (stack memory corruption) and possibly execute arbitrary code via a crafted AMS file with a large number of samples.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libmodplug(Debian:12) | < 1:0.8.8.4-1 | 1:0.8.8.4-1 |
| debian/libmodplug(Debian:13) | < 1:0.8.8.4-1 | 1:0.8.8.4-1 |
| debian/libmodplug(Debian:14) | < 1:0.8.8.4-1 | 1:0.8.8.4-1 |
| konstanty bialkowski libmodplug | <= 0.8.8.3 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.4 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.5 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.6 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.7 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.8 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.8.1 | No fix listed |
| konstanty bialkowski libmodplug | = 0.8.8.2 | No fix listed |
References
- Debian Security Tracker CVE-2011-2913 vendor-advisory
- jira.atheme.org
- FEDORA-2011-10503 vendor-advisory
- FEDORA-2011-12370 vendor-advisory
- openSUSE-SU-2011:0943 vendor-advisory
- modplug-xmms.git.sourceforge.net
- RHSA-2011:1264 vendor-advisory
- 45131 third-party-advisory vendor-advisory
- 45658 third-party-advisory vendor-advisory
- 45742 third-party-advisory vendor-advisory
- 45901 third-party-advisory vendor-advisory
- 46032 third-party-advisory vendor-advisory
- 46043 third-party-advisory vendor-advisory
- 46793 third-party-advisory vendor-advisory
- 48058 third-party-advisory vendor-advisory
- 48434 third-party-advisory vendor-advisory
- 48439 third-party-advisory vendor-advisory
- sourceforge.net
- USN-1255-1 vendor-advisory
- DSA-2415 vendor-advisory
- GLSA-201203-14 vendor-advisory
- GLSA-201203-16 vendor-advisory
- [oss-security] 20120810 CVE request: libmodplug: multiple vulnerabilities reported in <= 0.8.8.3 mailing-list
- [oss-security] 20120812 Re: CVE request: libmodplug: multiple vulnerabilities reported in <= 0.8.8.3 mailing-list
- 74210 vdb-entry
- 48979 vdb-entry
- libmodplug-ams-code-execution(68985) vdb-entry