Published: 17/08/2006 Updated: 17/10/2018

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

VMScore: 515

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and previous versions and libmodplug 0.8 and previous versions, as used in GStreamer and possibly other products, allow user-assisted remote malicious users to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.

Vulnerable Product	Search on Vulmon	Subscribe to Product
modplug tracker

Debian Bug report logs - #383574 libmodplug: CVE-2006-4192: buffer/heap overflow -> arbitrary code execution as user Package: libmodplug; Maintainer for libmodplug is Stephen Kitt <skitt@debianorg>; Reported by: Alec Berryman <alec@thenednet> Date: Fri, 18 Aug 2006 03:48:09 UTC Severity: grave Tags: fixed, secur ...

Luigi Auriemma discovered that libmodplug did not properly sanitize its input A specially crafted AMF file could be used to exploit this situation to cause buffer overflows and possibly execute arbitrary code as the user ...

/* by Luigi Auriemma */ #include <stdioh> #include <stdlibh> #include <stringh> #include <stdinth> #ifdef WIN32 #include <winsockh> // htonl #else #include <netinet/inh> #endif #define VER "01" #define HEAPOVERSZ 512 #define ITPHEAPOVERSZ 150000 #define ALLOCSAMPLESZ ...

NVD-CWE-Other http://aluigi.altervista.org/adv/mptho-adv.txt http://secunia.com/advisories/21418 http://www.novell.com/linux/security/advisories/2006_23_sr.html http://www.securityfocus.com/bid/19448 http://secunia.com/advisories/22658 http://secunia.com/advisories/22080 http://security.gentoo.org/glsa/glsa-200612-04.xml http://secunia.com/advisories/23294 http://www.mandriva.com/security/advisories?name=MDKSA-2007:001 http://secunia.com/advisories/23555 http://www.ubuntu.com/usn/usn-521-1 http://secunia.com/advisories/26979 http://securityreason.com/securityalert/1397 http://www.vupen.com/english/advisories/2006/4310 http://www.vupen.com/english/advisories/2006/3231 https://bugzilla.redhat.com/show_bug.cgi?id=497154 https://rhn.redhat.com/errata/RHSA-2011-0477.html http://cgit.freedesktop.org/gstreamer/gst-plugins-bad/commit/?id=bc2cdd57d549ab3ba59782e9b395d0cd683fd3ac https://exchange.xforce.ibmcloud.com/vulnerabilities/28309 https://exchange.xforce.ibmcloud.com/vulnerabilities/28305 http://www.securityfocus.com/archive/1/442721/100/100/threaded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=383574 https://usn.ubuntu.com/521-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/2160/

CVE-2006-4192

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect