CVE-2011-1574: Buffer Overflow
A stack-based buffer overflow vulnerability was discovered [1] in the way that that libmodplug handled S3M media files. If an attacker were able to coerce a user into opening a malicious S3M media file with an application linked to libmodplug, it could be possible to execute arbitrary code with the privileges of the user running the application.
This has been corrected upstream [2] in 0.8.8.2
[1] https://www.sec-consult.com/files/20110407-0libmodplugstackoverflow.txt [2] http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commitdiff;h=aecef259828a89bb00c2e6f78e89de7363b2237b
Other sources
Stack-based buffer overflow in the ReadS3M method in loads3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1574?
CVE-2011-1574 is classified as a critical vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2011-1574?
To fix CVE-2011-1574, users should update libmodplug to the latest version that patches this vulnerability.
What applications are affected by CVE-2011-1574?
CVE-2011-1574 affects applications linked to libmodplug, specifically versions 0.8 to 0.8.8.1.
Can CVE-2011-1574 be exploited remotely?
Yes, CVE-2011-1574 can be exploited remotely if a user is coerced into opening a malicious S3M media file.
What types of attacks can be executed due to CVE-2011-1574?
Exploitation of CVE-2011-1574 may allow attackers to execute arbitrary code on the affected system.