307 matches found
CVE-2009-1438
Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...
CVE-2009-1438
An integer overflow vulnerability exists in the CSoundFile::ReadMed function (located in src/load_med.cpp) of libmodplug before version 0.8.6 . This flaw can be triggered by a context-dependent attacker through a MED file containing a crafted song comment or song name. The overflow leads to a hea...
CVE-2009-1438
Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...
CVE-2009-1438: Undefined Security Weakness
Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...
CVE-2009-1438
Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...
VulnCheck KEV: CVE-2009-1438
Integer overflow in the CSoundFile::ReadMed function src/loadmed.cpp in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted 1 song comment or 2 song name, which triggers a...
Mandriva Update for libmodplug MDKSA-2007:001 (libmodplug)
Check for the Version of libmodplug OpenVAS Vulnerability Test Mandriva Update for libmodplug MDKSA-2007:001 libmodplug Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
Mandriva Update for libmodplug MDKSA-2007:001 (libmodplug)
Check for the Version of libmodplug OpenVAS Vulnerability Test Mandriva Update for libmodplug MDKSA-2007:001 libmodplug Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
Ubuntu: Security Advisory (USN-521-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for libmodplug vulnerability USN-521-1
Ubuntu Update for Linux kernel vulnerabilities USN-521-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5211.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libmodplug vulnerability USN-521-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Gentoo Security Advisory GLSA 200612-04 (libmodplug)
The remote host is missing updates announced in advisory GLSA 200612-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200612-04 (libmodplug)
The remote host is missing updates announced in advisory GLSA 200612-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Libmodplug - 's3m' Buffer Overflow
/The libmodplug library is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running an application that relies on the...
Libmodplug - s3m Buffer Overflow
Libmodplug - s3m Buffer Overflow /The libmodplug library is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running an...
libmodplug 's3m' Remote Buffer Overflow Vulnerability
No description provided by source. /The libmodplug library is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running ...
Ubuntu 6.06 LTS / 6.10 : libmodplug vulnerability (USN-521-1)
Luigi Auriemma discovered that libmodplug did not properly sanitize its input. A specially crafted AMF file could be used to exploit this situation to cause buffer overflows and possibly execute arbitrary code as the user. Note that Tenable Network Security has extracted the preceding description...
openSUSE 10 Security Update : xmms-plugins (xmms-plugins-2101)
Specially crafted AMF files could potentially be used to exploit a heap based buffer overflow in libmodplug CVE-2006-4192. if !definedfunc"nasllevel" || nasllevel = 70000 && nasllevel = 70200 && nasllevel = 80000 && nasllevel 80502 exit0; C Tenable Network Security, Inc. The descriptive text and...
USN-521-1: libmodplug vulnerability
Luigi Auriemma discovered that libmodplug did not properly sanitize its input. A specially crafted AMF file could be used to exploit this situation to cause buffer overflows and possibly execute arbitrary code as the user...
Mandrake Linux Security Advisory : libmodplug (MDKSA-2007:001)
Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Loadit.cpp and 2 crafted modules use...
MODPlug Tracker多个缓冲区溢出漏洞
MODPlug Tracker（也称为OpenMPT）允许用户在基于Windows的PC上创建音乐。 OpenMPT的ReadITProject函数没有过滤ITP文件中的文本字段，允许攻击者覆盖全局变量，执行恶意代码。请注意libmodplug中不支持ITP文件。 soundlib/Loadit.cpp中的漏洞代码： BOOL CSoundFile::ReadITProjectLPCBYTE lpStream, DWORD dwMemLength ... // Song name // name string length...