Lucene search

[email protected]CVE-2007-6720

HistoryJan 20, 2009 - 4:30 p.m.

CVE-2007-6720

2009-01-2016:30:00

[email protected]

web.nvd.nist.gov

libmikmod

dos

mod files

cve-2007-6720

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.7%

JSON

libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels.

Affected configurations

NVD

Node

igno_saitzlibmikmodMatch3.1.9-1

igno_saitzlibmikmodMatch3.1.9-2

igno_saitzlibmikmodMatch3.1.9-3

igno_saitzlibmikmodMatch3.1.9-4

igno_saitzlibmikmodMatch3.1.9-5

igno_saitzlibmikmodMatch3.1.9-6

igno_saitzlibmikmodMatch3.1.10-1

igno_saitzlibmikmodMatch3.1.10-2

igno_saitzlibmikmodMatch3.1.10-3

igno_saitzlibmikmodMatch3.1.10-4

igno_saitzlibmikmodMatch3.1.10-5

igno_saitzlibmikmodMatch3.1.11-1

igno_saitzlibmikmodMatch3.1.11-2

igno_saitzlibmikmodMatch3.1.11-3

igno_saitzlibmikmodMatch3.1.11-4

igno_saitzlibmikmodMatch3.1.11-5

igno_saitzlibmikmodMatch3.1.11-6

igno_saitzlibmikmodMatch3.1.12

igno_saitzlibmikmodMatch3.2.0

CPENameOperatorVersion
igno_saitz:libmikmodigno saitz libmikmodeq3.1.9-1
igno_saitz:libmikmodigno saitz libmikmodeq3.1.9-2
igno_saitz:libmikmodigno saitz libmikmodeq3.1.9-3
igno_saitz:libmikmodigno saitz libmikmodeq3.1.9-4
igno_saitz:libmikmodigno saitz libmikmodeq3.1.9-5
igno_saitz:libmikmodigno saitz libmikmodeq3.1.9-6
igno_saitz:libmikmodigno saitz libmikmodeq3.1.10-1
igno_saitz:libmikmodigno saitz libmikmodeq3.1.10-2
igno_saitz:libmikmodigno saitz libmikmodeq3.1.10-3
igno_saitz:libmikmodigno saitz libmikmodeq3.1.10-4

CPE	Name	Operator	Version
igno_saitz:libmikmod	igno saitz libmikmod	eq	3.1.9-1
igno_saitz:libmikmod	igno saitz libmikmod	eq	3.1.9-2
igno_saitz:libmikmod	igno saitz libmikmod	eq	3.1.9-3
igno_saitz:libmikmod	igno saitz libmikmod	eq	3.1.9-4
igno_saitz:libmikmod	igno saitz libmikmod	eq	3.1.9-5
igno_saitz:libmikmod	igno saitz libmikmod	eq	3.1.9-6
igno_saitz:libmikmod	igno saitz libmikmod	eq	3.1.10-1
igno_saitz:libmikmod	igno saitz libmikmod	eq	3.1.10-2
igno_saitz:libmikmod	igno saitz libmikmod	eq	3.1.10-3
igno_saitz:libmikmod	igno saitz libmikmod	eq	3.1.10-4