CVE-2009-3996

CVE-2009-3996 is a heap-based buffer overflow in the MikMod library used by libmikmod (and implicated by Winamp’s Module Decoder Plug‑in in older builds). Specifically, specially crafted Ultratracker/Impulse Tracker music files could overflow buffers, allowing arbitrary code execution or crashes ...

DEBIAN-CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

Heap overflow

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

CVE-2009-3995

Summary (CVE-2009-3995) : The issue arises from multiple heap-based buffer overflows in MikMod (libmikmod, loaders/load_it.c, possibly version 3.1.12) used by Impulse Tracker-compatible formats. Exploitation via specially crafted Impulse Tracker samples or instrument definitions could allow a rem...

CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

CVE-2009-3996

Heap-based buffer overflow in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file...

CVE-2009-3995: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

CVE-2009-3996: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file...

Mandriva Security Advisory MDVSA-2009:272-1 (libmikmod)

The remote host is missing an update to libmikmod announced via advisory MDVSA-2009:272-1. OpenVAS Vulnerability Test $Id: mdksa20092721.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:272-1 libmikmod Authors: Thomas Reinke Copyright: Copyright c 200...

Mandriva Security Advisory MDVSA-2009:272-1 (libmikmod)

The remote host is missing an update to libmikmod announced via advisory MDVSA-2009:272-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:272 (libmikmod)

The remote host is missing an update to libmikmod announced via advisory MDVSA-2009:272. OpenVAS Vulnerability Test $Id: mdksa2009272.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:272 libmikmod Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandrake Security Advisory MDVSA-2009:272 (libmikmod)

The remote host is missing an update to libmikmod announced via advisory MDVSA-2009:272. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : libmikmod (MDVSA-2009:272-1)

Multiple vulnerabilities has been found and corrected in libmikmod : libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allo...

SLES10: Security update for libmikmod

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libmikmod More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VI...

SLES10: Security update for libmikmod

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libmikmod More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009...

SLES9: Security update for libmikmod

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libmikmod For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5043927 within the...