DSA-1850 libmodplug -- several vulnerabilitiesID: oval:org.mitre.oval:def:8306 | Date: (C)2009-12-15 (M)2023-11-13 |
Class: PATCH | Family: unix |
Several vulnerabilities have been discovered in libmodplug, the shared libraries for mod music based on ModPlug. The Common Vulnerabilities and Exposures project identifies the following problems: It was discovered that libmodplug is prone to an integer overflow when processing a MED file with a crafted song comment or song name. It was discovered that libmodplug is prone to a buffer overflow in the PATinst function, when processing a long instrument name.
Platform: |
Debian 5.0 |
Debian 4.0 |