Buffer overflow

2009-09-1322:30:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

Low

0.248 Low

EPSS

Percentile

96.7%

JSON

Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in (1) test_oxm and (2) decrunch_oxm functions in misc/oxm.c, leading to a buffer overflow.

CPENameOperatorVersion
extended_module_playereq2.3.0
extended_module_playereq2.4.1
extended_module_playereq2.3.2
extended_module_playereq2.2.1
extended_module_playerle2.5.1
extended_module_playereq2.3.1
extended_module_playereq2.2.0
extended_module_playereq2.5.0
extended_module_playereq2.4.0

Name	Operator	Version
extended_module_player	eq	2.3.0
extended_module_player	eq	2.4.1
extended_module_player	eq	2.3.2
extended_module_player	eq	2.2.1
extended_module_player	le	2.5.1
extended_module_player	eq	2.3.1
extended_module_player	eq	2.2.0
extended_module_player	eq	2.5.0
extended_module_player	eq	2.4.0