PT-2009-6709 · Konstanty Bialkowski Others+1 · Libmodplug-Dev+4

Jan Lieskovsky · Published 1970-01-01 · Updated 2017-08-17 · CVE-2009-1438

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions libmodplug versions prior to 0.8.7 libmodplug0c2 (affected versions not specified) gstreamer0.10-plugins-bad-dbg (affected versions not specified) libmodplug-dev (affected versions not specified) gstreamer0.10-plugins-bad-doc (affected versions not specified) gstreamer0.10-sdl (affected versions not specified)

Description The issue involves multiple vulnerabilities in the libmodplug package, which can lead to disruptions in confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. Specifically, an integer overflow in the CSoundFile::ReadMed function in libmodplug before version 0.8.6 allows context-dependent attackers to execute arbitrary code via a MED file with a crafted song comment or song name, triggering a heap-based buffer overflow. This vulnerability has been exploited in the wild.

Recommendations For libmodplug versions prior to 0.8.7, update to version 0.8.7 or later to resolve the issue. For libmodplug0c2, gstreamer0.10-plugins-bad-dbg, libmodplug-dev, gstreamer0.10-plugins-bad-doc, and gstreamer0.10-sdl, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-189

Related Identifiers

BDU:2015-03304

BDU:2015-03305

BDU:2015-03306

BDU:2015-04117

BDU:2015-04118

BDU:2015-09392

CVE-2009-1438

DSA-1850-1

DSA-1851-1

Affected Products

Gstreamer0.10-Plugins-Bad

Gstreamer0.10-Sdl

Libmodplug

Libmodplug-Dev

Libmodplug0C2

References · 38

• 🔥 http://securityfocus.com/bid/30801 · Exploit
• https://bdu.fstec.ru/vul/2015-03306 · Security Note
• https://bdu.fstec.ru/vul/2015-09392 · Security Note
• http://security.gentoo.org/glsa/glsa-200907-07.xml · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2009-1438 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1513 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2009-1438 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1438 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1438 · Security Note
• http://redhat.com/archives/fedora-package-announce/2009-April/msg00907.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2009:128 · Vendor Advisory
• http://debian.org/security/2009/dsa-1851 · Vendor Advisory
• http://redhat.com/archives/fedora-package-announce/2009-April/msg00908.html · Vendor Advisory
• http://secunia.com/advisories/34797 · Vendor Advisory