PT-2011-1178 · Modplug+1 · Libmodplug+1
Vincent Danen
·
Published
2011-05-02
·
Updated
2023-02-13
·
CVE-2011-1574
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
libmodplug versions prior to 0.8.8.4
Description
The issue concerns multiple vulnerabilities in the libmodplug package that can be exploited remotely, potentially leading to breaches in confidentiality, integrity, and availability of protected information. Specifically, a stack-based buffer overflow in the ReadS3M method in load s3m.cpp allows remote attackers to execute arbitrary code via a crafted S3M file.
Recommendations
For libmodplug versions prior to 0.8.8.4, update to version 0.8.8.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the ReadS3M method in load s3m.cpp to minimize the risk of exploitation. Avoid using crafted S3M files until the issue is resolved.
Exploit
Fix
RCE
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Red Hat
Libmodplug