Debian Security Advisory DSA 1123-1 (libdumb)

The remote host is missing an update to libdumb announced via advisory DSA 1123-1. Luigi Auriemma discovered that DUMB, a tracker music library, performs insufficient sanitising of values parsed from IT music files, which might lead to a buffer overflow and execution of arbitrary code if...

Debian: Security Advisory (DSA-1123)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1123-1 : libdumb - buffer overflow

Luigi Auriemma discovered that DUMB, a tracker music library, performs insufficient sanitising of values parsed from IT music files, which might lead to a buffer overflow and execution of arbitrary code if manipulated files are read. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] [DSA 1123-1] New libdumb packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1123-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 24th, 2006 http://www.debian.org/security/faq -...

libdumb library buffer overflow

Buffer overflow on parsing IR music files format...

[Full-disclosure] [SECURITY] [DSA 1123-1] New libdumb packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1123-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 24th, 2006 http://www.debian.org/security/faq -...

CVE-2006-3668: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the itreadenvelope function in Dynamic Universal Music Bibliotheque DUMB 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted attackers to execute arbitrary code via a ".it" Impulse Tracker file with an envelope with a large numbe...