CVE-2011-2911

Published: Jun 7, 2012Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.

Affected (9)

Products: Konstanty Bialkowski: Libmodplug

Konstanty Bialkowski

1 product

Libmodplug

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Konstanty Bialkowski Libmodplug	Up to 0.8.8.3
Konstanty Bialkowski Libmodplug	Version 0.8.4
Konstanty Bialkowski Libmodplug	Version 0.8.5
Konstanty Bialkowski Libmodplug	Version 0.8.6
Konstanty Bialkowski Libmodplug	Version 0.8.7
Konstanty Bialkowski Libmodplug	Version 0.8.8.1
Konstanty Bialkowski Libmodplug	Version 0.8.8.2
Konstanty Bialkowski Libmodplug	Version 0.8.8
Konstanty Bialkowski Libmodplug	Version 0.8

Related CWEs

CWE-189

References (52)

http://jira.atheme.org/browse/AUDPLUG-394

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063786.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066044.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html

Source: secalert@redhat.com

http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms%3Ba=commitdiff%3Bh=2d4c56de314ab13e4437bd8b609f0b751066eee8

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2011-1264.html

Source: secalert@redhat.com

http://secunia.com/advisories/45131

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/45658

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/45742

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/45901

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46032

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46043

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46793

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/48058

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/48434

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/48439

Source: secalert@redhat.com

Vendor Advisory

http://sourceforge.net/projects/modplug-xmms/files/libmodplug/0.8.8.4/

Source: secalert@redhat.com

http://ubuntu.com/usn/usn-1255-1

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2415

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-201203-14.xml

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-201203-16.xml

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/08/10/4

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/08/12/4

Source: secalert@redhat.com

http://www.osvdb.org/74208

Source: secalert@redhat.com

http://www.securityfocus.com/bid/48979

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/68983

Source: secalert@redhat.com

http://jira.atheme.org/browse/AUDPLUG-394