Lucene search

K
ubuntuUbuntuUSN-995-1
HistorySep 29, 2010 - 12:00 a.m.

libMikMod vulnerabilities

2010-09-2900:00:00
ubuntu.com
32

7.9 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.219 Low

EPSS

Percentile

96.4%

Releases

  • Ubuntu 9.10
  • Ubuntu 9.04
  • Ubuntu 8.04

Packages

  • libmikmod -

Details

It was discovered that libMikMod incorrectly handled songs with different
channel counts. If a user were tricked into opening a crafted song file,
an attacker could cause a denial of service. (CVE-2007-6720)

It was discovered that libMikMod incorrectly handled certain malformed XM
files. If a user were tricked into opening a crafted XM file, an attacker
could cause a denial of service. (CVE-2009-0179)

It was discovered that libMikMod incorrectly handled certain malformed
Impulse Tracker files. If a user were tricked into opening a crafted
Impulse Tracker file, an attacker could cause a denial of service or
possibly execute arbitrary code with the privileges of the user invoking
the program. (CVE-2009-3995, CVE-2010-2546, CVE-2010-2971)

It was discovered that libMikMod incorrectly handled certain malformed
Ultratracker files. If a user were tricked into opening a crafted
Ultratracker file, an attacker could cause a denial of service or possibly
execute arbitrary code with the privileges of the user invoking the
program. (CVE-2009-3996)

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchlibmikmod2<Β 3.1.11-6ubuntu4.1UNKNOWN
Ubuntu9.10noarchlibmikmod2<Β 3.1.11-a-6ubuntu4.1UNKNOWN
Ubuntu9.10noarchlibmikmod2-dev<Β 3.1.11-a-6ubuntu4.1UNKNOWN
Ubuntu9.04noarchlibmikmod2<Β 3.1.11-6ubuntu3.9.04.1UNKNOWN
Ubuntu9.04noarchlibmikmod2<Β 3.1.11-a-6ubuntu3.9.04.1UNKNOWN
Ubuntu9.04noarchlibmikmod2-dev<Β 3.1.11-a-6ubuntu3.9.04.1UNKNOWN
Ubuntu8.04noarchlibmikmod2<Β 3.1.11-6ubuntu3.8.04.1UNKNOWN
Ubuntu8.04noarchlibmikmod2<Β 3.1.11-a-6ubuntu3.8.04.1UNKNOWN
Ubuntu8.04noarchlibmikmod2-dev<Β 3.1.11-a-6ubuntu3.8.04.1UNKNOWN

7.9 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.219 Low

EPSS

Percentile

96.4%