Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2011-2911

Опубликовано: 07 июн. 2012
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.8

Описание

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.

РелизСтатусПримечание
devel

not-affected

uses system libmodplug
hardy

ignored

end of life
lucid

not-affected

uses system libmodplug
maverick

not-affected

uses system libmodplug
natty

not-affected

uses system libmodplug
oneiric

not-affected

uses system libmodplug
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

1:0.8.8.4-1
hardy

ignored

end of life
lucid

released

1:0.8.7-1ubuntu0.3
maverick

released

1:0.8.8.1-1ubuntu1.3
natty

released

1:0.8.8.1-2ubuntu0.3
oneiric

released

1:0.8.8.2-3ubuntu1.1
upstream

released

0.8.8.4

Показывать по

EPSS

Процентиль: 86%
0.02882
Низкий

6.8 Medium

CVSS2

Связанные уязвимости

redhat
больше 14 лет назад

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.

nvd
больше 13 лет назад

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.

debian
больше 13 лет назад

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.c ...

github
больше 3 лет назад

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.

fstec
почти 14 лет назад

Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 86%
0.02882
Низкий

6.8 Medium

CVSS2