This update of libmodplug0 fixes the following issues:
An integer overflow error exists within the
"CSoundFile::ReadWav()" function (src/load_wav.cpp) when
processing certain WAV files. This can be exploited to
cause a heap-based buffer overflow by tricking a user into
opening a specially crafted WAV file. (CVE-2011-2911)
Boundary errors within the "CSoundFile::ReadS3M()"
function (src/load_s3m.cpp) when processing S3M files can
be exploited to cause stack-based buffer overflows by
tricking a user into opening a specially crafted S3M file.
(CVE-2011-2912)
An off-by-one error within the "CSoundFile::ReadAMS()"
function (src/load_ams.cpp) can be exploited to cause a
stack corruption by tricking a user into opening a
specially crafted AMS file. (CVE-2011-2913)
An off-by-one error within the "CSoundFile::ReadDSM()"
function (src/load_dms.cpp) can be exploited to cause a
memory corruption by tricking a user into opening a
specially crafted DSM file. (CVE-2011-2914)
An off-by-one error within the "CSoundFile::ReadAMS2()"
function (src/load_ams.cpp) can be exploited to cause a
memory corruption by tricking a user into opening a
specially crafted AMS file. (CVE-2011-2915)
Also an overflow in the ABC loader was fixed.
(CVE-2011-1761)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
openSUSE | 11.3 | x86_64 | libmodplug-devel | < 0.8.8.4-2.2.1 | libmodplug-devel-0.8.8.4-2.2.1.x86_64.rpm |
openSUSE | 11.4 | x86_64 | libmodplug-devel | < 0.8.8.4-2.2.1 | libmodplug-devel-0.8.8.4-2.2.1.x86_64.rpm |
openSUSE | 11.3 | i586 | libmodplug-devel | < 0.8.8.4-2.2.1 | libmodplug-devel-0.8.8.4-2.2.1.i586.rpm |
openSUSE | 11.3 | x86_64 | libmodplug0 | < 0.8.8.4-2.2.1 | libmodplug0-0.8.8.4-2.2.1.x86_64.rpm |
openSUSE | 11.3 | x86_64 | libmodplug0-32bit | < 0.8.8.4-2.2.1 | libmodplug0-32bit-0.8.8.4-2.2.1.x86_64.rpm |
openSUSE | 11.4 | i586 | libmodplug0 | < 0.8.8.4-2.2.1 | libmodplug0-0.8.8.4-2.2.1.i586.rpm |
openSUSE | 11.3 | i586 | libmodplug0 | < 0.8.8.4-2.2.1 | libmodplug0-0.8.8.4-2.2.1.i586.rpm |
openSUSE | 11.4 | x86_64 | libmodplug0-32bit | < 0.8.8.4-2.2.1 | libmodplug0-32bit-0.8.8.4-2.2.1.x86_64.rpm |
openSUSE | 11.4 | x86_64 | libmodplug0 | < 0.8.8.4-2.2.1 | libmodplug0-0.8.8.4-2.2.1.x86_64.rpm |
openSUSE | 11.4 | i586 | libmodplug-devel | < 0.8.8.4-2.2.1 | libmodplug-devel-0.8.8.4-2.2.1.i586.rpm |