CVE-2011-2915

Published: Jun 7, 2012Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Off-by-one error in the CSoundFile::ReadAMS2 function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted AMS file with a large number of instruments.

Affected (9)

Products: Konstanty Bialkowski: Libmodplug

Konstanty Bialkowski

1 product

Libmodplug

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Konstanty Bialkowski Libmodplug	Up to 0.8.8.3
Konstanty Bialkowski Libmodplug	Version 0.8.4
Konstanty Bialkowski Libmodplug	Version 0.8.5
Konstanty Bialkowski Libmodplug	Version 0.8.6
Konstanty Bialkowski Libmodplug	Version 0.8.7
Konstanty Bialkowski Libmodplug	Version 0.8.8.1
Konstanty Bialkowski Libmodplug	Version 0.8.8.2
Konstanty Bialkowski Libmodplug	Version 0.8.8
Konstanty Bialkowski Libmodplug	Version 0.8

Related CWEs

CWE-189

References (52)

http://jira.atheme.org/browse/AUDPLUG-394

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063786.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066044.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html

Source: secalert@redhat.com

http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms%3Ba=commitdiff%3Bh=16d7a78efe14d345a6c5b241f88422ad0ee483ea

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2011-1264.html

Source: secalert@redhat.com

http://secunia.com/advisories/45131

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/45658

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/45742

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/45901

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46032

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46043

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46793

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/48058

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/48434

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/48439

Source: secalert@redhat.com

Vendor Advisory

http://sourceforge.net/projects/modplug-xmms/files/libmodplug/0.8.8.4/

Source: secalert@redhat.com

http://ubuntu.com/usn/usn-1255-1

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2415

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-201203-14.xml

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-201203-16.xml

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/08/10/4

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/08/12/4

Source: secalert@redhat.com

http://www.osvdb.org/74210

Source: secalert@redhat.com

http://www.securityfocus.com/bid/48979

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/68987

Source: secalert@redhat.com

http://jira.atheme.org/browse/AUDPLUG-394