93 matches found
CVE-2022-34927
MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file...
Arbitrary Code Execution
milkytracker is vulnerable to arbitrary code execution. A stack-based buffer overflow in the LoaderXM::load function in LoaderXM.cpp allows an attacker to execute arbitrary code on the host OS...
Buffer Overflow
MilkyTracker is vulnerable to buffer overflow. The vulnerability existed because the system did not check for the limit in ModuleEditor::convertInstrument...
Denial Of Service (DoS)
milkytracker is vulnerable to denial of service. A heap-based buffer overflow in XMFile::read in XMFile.cpp in milkyplay allows an attacker to crash the application...
Use-after-free
MilkyTracker is vulnerable to use-after-free vulnerability. The exploit made possible by the PlayerGeneric destructor in PlayerGeneric.cpp...
Ubuntu: Security Advisory (USN-4499-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4499-1: MilkyTracker vulnerabilities
It was discovered that MilkyTracker did not properly handle certain input. If a user were tricked into opening a malicious file, an attacker could cause MilkyTracker to crash or potentially execute arbitrary code...
USN-4499-1 MilkyTracker vulnerabilities
It was discovered that MilkyTracker did not properly handle certain input. If a user were tricked into opening a malicious file, an attacker could cause MilkyTracker to crash or potentially execute arbitrary code...
Ubuntu 16.04 LTS : MilkyTracker vulnerabilities (USN-4499-1)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4499-1 advisory. It was discovered that MilkyTracker did not properly handle certain input. If a user were tricked into opening a malicious file, an attacker could cause...
Debian: Security Advisory (DLA-2292-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2292-1 : milkytracker security update
Several vulnerabilities were fixed in MilkyTracker, a music tracker for composing music in the MOD and XM module file formats. CVE-2019-14464 Heap-based buffer overflow in XMFile::read CVE-2019-14496 Stack-based buffer overflow in LoaderXM::load CVE-2019-14497 Heap-based buffer overflow in...
[SECURITY] [DLA 2292-1] milkytracker security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2292-1 [email protected] https://www.debian.org/lts/security/ July 27, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package :...
DLA-2292-1 milkytracker - security update
Bulletin has no description...
MilkyTracker Resource Management Error Vulnerability
MilkyTracker is an application that plays MOD format files and arranges them. A resource management error vulnerability exists in the PlayerGeneric.cpp file in MilkyTracker 1.02.00 and earlier versions. The vulnerability originates from a networked system or product that mismanages system resourc...
CVE-2020-15569
PlayerGeneric.cpp in MilkyTracker through 1.02.00 has a use-after-free in the PlayerGeneric destructor...
CVE-2020-15569
PlayerGeneric.cpp in MilkyTracker through 1.02.00 has a use-after-free in the PlayerGeneric destructor...
DEBIAN-CVE-2020-15569
PlayerGeneric.cpp in MilkyTracker through 1.02.00 has a use-after-free in the PlayerGeneric destructor...
UBUNTU-CVE-2020-15569
PlayerGeneric.cpp in MilkyTracker through 1.02.00 has a use-after-free in the PlayerGeneric destructor...
