Published: 09/05/2011 Updated: 13/02/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 685

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug prior to 0.8.8.2 allows remote malicious users to execute arbitrary code via a crafted S3M file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
konstanty bialkowski libmodplug 0.8.5
konstanty bialkowski libmodplug
konstanty bialkowski libmodplug 0.8.7
konstanty bialkowski libmodplug 0.8.4
konstanty bialkowski libmodplug 0.8.8
konstanty bialkowski libmodplug 0.8
konstanty bialkowski libmodplug 0.8.6

libmodplug could be made to run programs as your login if it opened a specially crafted file ...

M Lucinskij and P Tumenas discovered a buffer overflow in the code for processing S3M tracker files in the Modplug tracker music library, which may result in the execution of arbitrary code For the oldstable distribution (lenny), this problem has been fixed in version 084-1+lenny2 For the stable distribution (squeeze), this problem has been f ...

## # $Id: vlc_modplug_s3mrb 12282 2011-04-08 15:48:53Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class ...

CWE-119 https://rhn.redhat.com/errata/RHSA-2011-0477.html http://openwall.com/lists/oss-security/2011/04/11/13 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622091 https://bugzilla.redhat.com/show_bug.cgi?id=695420 http://openwall.com/lists/oss-security/2011/04/11/6 https://www.sec-consult.com/files/20110407-0_libmodplug_stackoverflow.txt http://securitytracker.com/id?1025480 http://www.debian.org/security/2011/dsa-2226 http://www.mandriva.com/security/advisories?name=MDVSA-2011:085 http://securityreason.com/securityalert/8243 http://www.gentoo.org/security/en/glsa/glsa-201203-16.xml http://secunia.com/advisories/48434 http://secunia.com/advisories/44870 https://www.ubuntu.com/usn/USN-1148-1/http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms%3Ba=commit%3Bh=aecef259828a89bb00c2e6f78e89de7363b2237b https://usn.ubuntu.com/1148-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/17252/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-1574

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect