CVE-2017-11311 soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that trigger...
HighCVSS 7.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that triggers use of the same sample slot for two samples.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libopenmpt(Debian:12) | < 0.2.8461~beta26-1 | 0.2.8461~beta26-1 |
| debian/libopenmpt(Debian:13) | < 0.2.8461~beta26-1 | 0.2.8461~beta26-1 |
| debian/libopenmpt(Debian:14) | < 0.2.8461~beta26-1 | 0.2.8461~beta26-1 |
| openmpt libopenmpt | <= 0.2.8414 | No fix listed |
| openmpt | <= 1.26.12.00 | No fix listed |
References
- Debian Security Tracker CVE-2017-11311 vendor-advisory
- bugs.debian.org issue-tracking patch third-party-advisory
- lib.openmpt.org patch vendor-advisory
- source.openmpt.org issue-tracking patch third-party-advisory
- source.openmpt.org issue-tracking patch third-party-advisory