CVE-2011-2912: Buffer Overflow
Published Jun 7, 2012
·Updated
Stack-based buffer overflow in the CSoundFile::ReadS3M function in src/loads3m.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted S3M file with an invalid offset.
Affected Software
9 affected components
Konstanty Bialkowski Libmodplug=0.8.5
Konstanty Bialkowski Libmodplug=0.8.7
Konstanty Bialkowski Libmodplug<=0.8.8.3
Konstanty Bialkowski Libmodplug=0.8.4
Konstanty Bialkowski Libmodplug=0.8.8.1
Konstanty Bialkowski Libmodplug=0.8.8.2
Konstanty Bialkowski Libmodplug=0.8.8
Konstanty Bialkowski Libmodplug=0.8
Konstanty Bialkowski Libmodplug=0.8.6
Event History
Jun 7, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2912?
CVE-2011-2912 is classified as a high-severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2011-2912?
To fix CVE-2011-2912, update libmodplug to version 0.8.8.4 or later.
3
What versions of libmodplug are affected by CVE-2011-2912?
CVE-2011-2912 affects libmodplug versions prior to 0.8.8.4, including 0.8.5, 0.8.6, 0.8.7, 0.8.8.1, 0.8.8.2, and 0.8.8.3.
4
Can CVE-2011-2912 cause denial of service?
Yes, CVE-2011-2912 can lead to denial of service through a stack-based buffer overflow.
5
Who is the vendor of the affected software for CVE-2011-2912?
The vendor of the affected software is Konstanty Bialkowski, who maintains libmodplug.