vendor:
libmodplug library
by:
N/A
7.5
CVSS
HIGH
Buffer-Overflow
119
CWE
Product Name: libmodplug library
Affected Version From: libmodplug 0.8.4
Affected Version To: libmodplug 0.8.6
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Ubuntu, TTPlayer, S.u.S.E., RedHat, Pardus Linux, MandrakeSoft Linux, GStreamer, Gentoo Linux, Debian Linux
2009
libmodplug library Remote Buffer-Overflow Vulnerability
The libmodplug library is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running an application that relies on the affected library. Failed exploit attempts will result in a denial-of-service condition.
Mitigation:
Upgrade to libmodplug 0.8.6 or later.