Описание
libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crashes or potential code execution.
A flaw was found in libmikmod. A local attacker can cause arbitrary code execution or a Denial of Service (DoS) by enticing a user to open a specially crafted DSM audio module. An integer overflow during track count processing in the DSM file loader leads to a heap-based buffer overflow that corrupts application memory.
Отчет
This vulnerability is rated as Important because successful exploitation can allow an attacker to execute arbitrary code within the target application's process context, despite requiring user interaction. Red Hat Enterprise Linux does not ship libmikmod in the base distribution, restricting exposure to environments where optional community packages are installed. Exploitation requires an application to parse an untrusted digital sound interface module, limiting the attack surface to workflows handling external audio assets.
Ссылки на источники
Дополнительная информация
Статус:
EPSS
7.8 High
CVSS3
Связанные уязвимости
libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crashes or potential code execution.
libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crashes or potential code execution.
libmikmod before 3.3.14 contains an integer overflow vulnerability in ...
libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crashes or potential code execution.
EPSS
7.8 High
CVSS3