REDHAT-BUG-695420: Buffer Overflow

Q: What conditions are required for exploitation?

An attacker must cause a user to open a malicious S3M media file in an application linked against libmodplug. Successful exploitation could execute arbitrary code with the privileges of that user.

Q: Which deployments are most exposed?

Systems are exposed where users open S3M files using applications linked to a vulnerable libmodplug version. The issue is client-side and depends on user interaction with attacker-controlled media files.

Q: What version contains the upstream correction?

The vulnerability was corrected upstream in libmodplug version 0.8.8.2.

Published Apr 11, 2011

Updated

A stack-based buffer overflow vulnerability was discovered [1] in the way that that libmodplug handled S3M media files. If an attacker were able to coerce a user into opening a malicious S3M media file with an application linked to libmodplug, it could be possible to execute arbitrary code with the privileges of the user running the application.

This has been corrected upstream [2] in 0.8.8.2

[1] https://www.sec-consult.com/files/20110407-0libmodplugstackoverflow.txt [2] http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commitdiff;h=aecef259828a89bb00c2e6f78e89de7363b2237b

Affected Software

1 affected component

libmodplug libmodplug<0.8.8.2

Event History

Apr 11, 2011

Data Sourced

via Red Hat·05:12 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What conditions are required for exploitation?

An attacker must cause a user to open a malicious S3M media file in an application linked against libmodplug. Successful exploitation could execute arbitrary code with the privileges of that user.

Which deployments are most exposed?

Systems are exposed where users open S3M files using applications linked to a vulnerable libmodplug version. The issue is client-side and depends on user interaction with attacker-controlled media files.

What version contains the upstream correction?

The vulnerability was corrected upstream in libmodplug version 0.8.8.2.

REDHAT-BUG-695420: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

What conditions are required for exploitation?

Which deployments are most exposed?

What version contains the upstream correction?

Company

Resources

Contact

Frequently Asked Questions

What conditions are required for exploitation?

Which deployments are most exposed?

What version contains the upstream correction?