11 results · Feed
-
Medium 5.5
libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Load
libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMF_Load() loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out…
-
Medium 5.5
libmikmod through 3.3.15 Out-of-Bounds Read in MTM_Load via Channel Count
libmikmod through 3.3.15 contains a global out-of-bounds read vulnerability in the MultiTracker loader MTM_Load() because the module channel count is never clamped. Attackers can supply a crafted .mtm file with a channel count above 32 to read past the static…
-
High 7.8
libmikmod before 3.3.14 Heap Buffer Overflow via OKT Loader OKT_doPBOD
libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKT_doPBOD() that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing …
-
Medium 5.5
libmikmod before 3.3.14 Heap Out-of-Bounds Read via IT Module Loader
libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader load_it.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern row…
-
High 7.8
libmikmod before 3.3.14 Heap Buffer Overflow via DSM Loader Integer Overflow
libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit val…
-
Unscored —
Multiple heap-based buffer overflows in loaders/load_it.c in libmikmod, possibly 3.1.12, might allow remote attackers t…
-
Unscored —
loaders/load_it.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of name##env relative to…
-
Unscored —
Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, …
-
Unscored —
Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmo…
-
Unscored —
libmikmod 3.1.11 through 3.2.0, as used by MikMod and possibly other products, allows user-assisted attackers to cause …
-
Unscored —
libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count o…