Lucene search
MitreCVELIST:CVE-2009-1438HistoryApr 27, 2009 - 5:43 p.m.
CVE-2009-1438
2009-04-2717:43:00
mitre
raw.githubusercontent.com
1
Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted (1) song comment or (2) song name, which triggers a heap-based buffer overflow, as exploited in the wild in August 2008.
Related
openvas
openvas
Fedora Core 10 FEDORA-2009-4068 (libmodplug)
2009-05-05 00:00:00
Fedora Core 9 FEDORA-2009-4064 (libmodplug)
2009-05-05 00:00:00
Debian Security Advisory DSA 1851-1 (gst-plugins-bad0.10)
2009-08-17 00:00:00
prion
prion
Integer overflow
2009-04-27 18:00:00
nessus
nessus
Fedora 9 : libmodplug-0.8.7-1.fc9 (2009-4064)
2009-04-28 00:00:00
debiancve
debiancve
CVE-2009-1438
2009-04-27 18:00:00
ubuntucve
ubuntucve
CVE-2009-1438
2009-04-27 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: libmodplug-0.8.7-1.fc10
2009-04-28 01:19:34
[SECURITY] Fedora 9 Update: libmodplug-0.8.7-1.fc9
2009-04-28 01:19:14
securityvulns
securityvulns
libmodplug library multiple security vulnerabilities
2009-05-07 00:00:00
[USN-771-1] libmodplug vulnerabilities
2009-05-07 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package libmodplug version 0.8.7-alt1
2009-05-01 00:00:00
cve
cve
CVE-2009-1438
2009-04-27 18:00:00
debian
debian
gentoo
gentoo
ModPlug: User-assisted execution of arbitrary code
2009-07-12 00:00:00
osv
osv
libmodplug - arbitrary code execution
2009-08-04 00:00:00
ubuntu
ubuntu
libmodplug vulnerabilities
2009-05-07 00:00:00