PT-2019-13722 · Milkytracker+2 · Milkytracker+2

Fredric · Publicado 2019-08-01 · Atualizado 2023-01-20 · CVE-2019-14496

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MilkyTracker version 1.02.00

Description The issue is related to a stack-based buffer overflow in the LoaderXM::load function in LoaderXM.cpp within the milkyplay component of MilkyTracker. This overflow can occur due to improper handling of data, potentially leading to exploitation.

Recommendations For MilkyTracker version 1.02.00, consider applying a patch or fix that addresses the stack-based buffer overflow in the LoaderXM::load function to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALT-PU-2021-3029

ALT-PU-2022-2443

CVE-2019-14496

DLA-1961-1

DLA-2292-1

USN-4499-1

Produtos afetados

Alt Linux

Milkytracker

Ubuntu

Referências · 18

• 🔥 https://github.com/milkytracker/MilkyTracker/issues/183 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-14496 · Nota de Segurança
• https://osv.dev/vulnerability/DLA-2292-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-14496 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-4499-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-14497 · Aviso do Fabricante
• https://lists.debian.org/debian-lts-announce/2019/10/msg00029.html · Nota
• https://security-tracker.debian.org/tracker/CVE-2019-14496 · Aviso do Fabricante
• https://osv.dev/vulnerability/DLA-1961-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-14496 · Aviso do Fabricante
• https://t.me/cvenotify/42560 · Publicação no Telegram
• https://ubuntu.com/security/notices/USN-4499-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-14496 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-14464 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-14496 · Aviso do Fabricante