libmodplug vulnerability

2007-09-2700:00:00

ubuntu.com

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.239 Low

EPSS

Percentile

96.6%

JSON

Releases

Ubuntu 6.10
Ubuntu 6.06

Packages

libmodplug -

Details

Luigi Auriemma discovered that libmodplug did not properly sanitize
its input. A specially crafted AMF file could be used to exploit this
situation to cause buffer overflows and possibly execute arbitrary code
as the user.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchlibmodplug0c2< 1:0.7-5ubuntu0.6.10.1UNKNOWN
Ubuntu6.06noarchlibmodplug0c2< 1:0.7-5ubuntu0.6.06.1UNKNOWN