CVE-2017-11311: Buffer Overflow
soundlib/Loadpsm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that triggers use of the same sample slot for two samples.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Systems that process untrusted PSM files with affected OpenMPT or libopenmpt versions are exposed. The vulnerable code is present in OpenMPT through 1.26.12.00 and libopenmpt releases before 0.2.8461-beta26.
What does an attacker need to exploit the vulnerability?
An attacker needs to persuade a user or application to open a specially crafted PSM file. No privileges are required, but user interaction is required according to the CVSS vector.
What should be done if the affected software is in use?
Apply the available patch by upgrading beyond the affected version ranges. The provided data does not identify a separate configuration change or workaround.