CVE-2011-2913

Published: Jun 7, 2012Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Off-by-one error in the CSoundFile::ReadAMS function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (stack memory corruption) and possibly execute arbitrary code via a crafted AMS file with a large number of samples.

Affected (9)

Products: Konstanty Bialkowski: Libmodplug

Konstanty Bialkowski

1 product

Libmodplug

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Konstanty Bialkowski Libmodplug	Up to 0.8.8.3
Konstanty Bialkowski Libmodplug	Version 0.8.4
Konstanty Bialkowski Libmodplug	Version 0.8.5
Konstanty Bialkowski Libmodplug	Version 0.8.6
Konstanty Bialkowski Libmodplug	Version 0.8.7
Konstanty Bialkowski Libmodplug	Version 0.8.8.1
Konstanty Bialkowski Libmodplug	Version 0.8.8.2
Konstanty Bialkowski Libmodplug	Version 0.8.8
Konstanty Bialkowski Libmodplug	Version 0.8

Related CWEs

CWE-189

References (52)

http://jira.atheme.org/browse/AUDPLUG-394

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063786.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066044.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html

Source: secalert@redhat.com

http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms%3Ba=commitdiff%3Bh=26243ab9fe1171f70053e9aec4b20e9f7de9e4ef

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2011-1264.html

Source: secalert@redhat.com

http://secunia.com/advisories/45131

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/45658

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/45742

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/45901

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46032

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46043

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46793

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/48058

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/48434

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/48439

Source: secalert@redhat.com

Vendor Advisory

http://sourceforge.net/projects/modplug-xmms/files/libmodplug/0.8.8.4/

Source: secalert@redhat.com

http://ubuntu.com/usn/usn-1255-1

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2415

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-201203-14.xml

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-201203-16.xml

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/08/10/4

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/08/12/4

Source: secalert@redhat.com

http://www.osvdb.org/74210

Source: secalert@redhat.com

http://www.securityfocus.com/bid/48979

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/68985

Source: secalert@redhat.com

http://jira.atheme.org/browse/AUDPLUG-394