[SECURITY] Fedora 17 Update: xmp-3.4.0-11.fc17

The Extended Module Player is a modplayer for Unix-like systems that plays over 80 mainstream and obscure module formats from Amiga, Atari, Acorn, Apple IIgs and PC, including Protracker MOD, Scream Tracker 3 S3M, Fast Tracker II XM and Impulse Tracker IT files...

[SECURITY] Fedora 18 Update: xmp-3.5.0-3.fc18

The Extended Module Player is a modplayer for Unix-like systems that plays over 80 mainstream and obscure module formats from Amiga, Atari, Acorn, Apple IIgs and PC, including Protracker MOD, Scream Tracker 3 S3M, Fast Tracker II XM and Impulse Tracker IT files...

Winamp < 5.623 Multiple Integer Overflows

The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.623 and thus is reportedly affected by the following integer overflow vulnerabilities : - An integer-overflow vulnerability exists in 'inavi.dll' when allocating...

CVE-2011-4857

Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...

Heap overflow

Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...

CVE-2011-4857

Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...

CVE-2011-4857: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...

Ubuntu Update for libmikmod vulnerabilities USN-995-1

Ubuntu Update for Linux kernel vulnerabilities USN-995-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9951.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for libmikmod vulnerabilities USN-995-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

USN-995-1: libMikMod vulnerabilities

It was discovered that libMikMod incorrectly handled songs with different channel counts. If a user were tricked into opening a crafted song file, an attacker could cause a denial of service. CVE-2007-6720 It was discovered that libMikMod incorrectly handled certain malformed XM files. If a user...

libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

Mandriva Update for libmikmod MDVSA-2010:151 (libmikmod)

Check for the Version of libmikmod OpenVAS Vulnerability Test Mandriva Update for libmikmod MDVSA-2010:151 libmikmod Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Mandriva Linux Security Advisory : libmikmod (MDVSA-2010:151)

A vulnerability has been discovered and corrected in libmikmod : Multiple heap-based buffer overflows might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file CVE-2009-3995. Packages for 2008.0 and 2009.0 are...

libmikmod multiple buffer overflows

Multiple overflows on Impulse Tracker and Ultratracker format parsing...

CVE-2010-2971

loaders/loadit.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of nameenv relative to nametick and namenode, which allows remote attackers to trigger a buffer over-read and possibly have unspecified other impact via a crafted Impulse Tracker file, a related issue to...

CVE-2010-2546

Multiple heap-based buffer overflows in loaders/loadit.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and ITProcessEnvelope. NOTE: some of thes...

CVE-2010-2546

Multiple heap-based buffer overflows in loaders/loadit.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and ITProcessEnvelope. NOTE: some of thes...

DEBIAN-CVE-2010-2971

loaders/loadit.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of nameenv relative to nametick and namenode, which allows remote attackers to trigger a buffer over-read and possibly have unspecified other impact via a crafted Impulse Tracker file, a related issue to...

DEBIAN-CVE-2010-2546

Multiple heap-based buffer overflows in loaders/loadit.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and ITProcessEnvelope. NOTE: some of thes...

Design/Logic Flaw

loaders/loadit.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of nameenv relative to nametick and namenode, which allows remote attackers to trigger a buffer over-read and possibly have unspecified other impact via a crafted Impulse Tracker file, a related issue to...

Heap overflow

Multiple heap-based buffer overflows in loaders/loadit.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and ITProcessEnvelope. NOTE: some of thes...