PT-2006-1072 · Libmodplug Team+2 · Libmodplug+2

Jan Lieskovsky · Published 2006-08-17 · Updated 2018-10-17 · CVE-2006-4192

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: OpenMPT versions 1.17.02.43 and earlier libmodplug versions 0.8 and earlier

Description: The issue allows user-assisted remote attackers to execute arbitrary code via long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load it.cpp and crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp. This can be demonstrated by crafted AMF files. The vulnerability may lead to disruption of confidentiality, integrity, and availability of protected information and can be exploited remotely.

Recommendations: For OpenMPT versions 1.17.02.43 and earlier, consider disabling the CSoundFile::ReadITProject and CSoundFile::ReadSample functions until a patch is available. For libmodplug versions 0.8 and earlier, restrict access to the soundlib/Load it.cpp and soundlib/Sndfile.cpp modules to minimize the risk of exploitation. Avoid using crafted ITP files and modules in the affected products until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

BDU:2015-09528

CVE-2006-4192

RHSA-2011:0477

RHSA-2011_0477

Affected Products

Openmpt

Red Hat

Libmodplug

References · 37

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/vlc_modplug_s3m.rb · Exploit
• 🔥 https://exploit-db.com/exploits/2160 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2006-4192 · Vendor Advisory
• http://secunia.com/advisories/21418 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200612-04.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09528 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-4192 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_23_sr.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4192 · Security Note
• https://rhn.redhat.com/errata/RHSA-2011-0477.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-4192 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09436 · Security Note
• http://ubuntu.com/usn/usn-521-1 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:001 · Vendor Advisory
• http://aluigi.altervista.org/adv/mptho-adv.txt · Note