Description
Buffer overflow in the Loader_XM::load_instrument_internal function in loader_xm.cpp for Cheese Tracker 0.9.9 and earlier allows user-assisted attackers to execute arbitrary code via a crafted file with a large amount of extra data.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | cheesetracker | 0.9.9-1sarge1 | DSA-1166 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Cheese Tracker 0.9.9 - Local Buffer Overflow EDB-2065 · local · Jul 23, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- DSA-1166 cheesetracker - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
References
- 19115 vdb-entry
- 1291 third-party-advisory
- http://aluigi.altervista.org/adv/cheesebof-adv.txt
- 21759 third-party-advisory
- GLSA-200610-13 vendor-advisory
- 20060723 Buffer-overflow in the XM loader of Cheese Tracker 0.9.9 mailing-list
- DSA-1166 vendor-advisory
- cheesetronic-loaderxm-bo(27957) vdb-entry
- 22643 third-party-advisory