Description
Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp (TunePimp) 0.4.2 allow remote user-assisted attackers to cause a denial of service (application crash) and possibly execute code via a long (1) Album release date (MBE_ReleaseGetDate), (2) data, or (3) error strings.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | libtunepimp | 0.3.0-3sarge2 | DSA-1135-1 |
Advisories 1
- DSA-1135-1 libtunepimp - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
References
- libtunepimp-lookuptrmlookup-bo(27728) vdb-entry
- http://bugs.musicbrainz.org/ticket/1764
- 21277 third-party-advisory
- DSA-1135 vendor-advisory
- 1016539 vdb-entry
- 21323 third-party-advisory
- MDKSA-2006:126 vendor-advisory
- 21106 third-party-advisory
- 21027 third-party-advisory
- GLSA-200607-11 vendor-advisory
- 27094 vdb-entry
- 21026 third-party-advisory
- 18961 vdb-entry
- USN-318-1 vendor-advisory
- ADV-2006-2785 vdb-entry