Description
Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libmikmod | 3.1.11-6.2 | — |
| Debian 13 | libmikmod | 3.1.11-6.2 | — |
| Debian 12 | libmikmod | 3.1.11-6.2 | — |
| Debian 5.0 | libmikmod | 3.1.11-6+lenny1 | DSA-2071-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | mikmod +1 | 3.1.6-39.el5_5.1 | RHSA-2010:0720 |
| RHEL 4 | mikmod +1 | 3.1.6-33.el4_8.1 | RHSA-2010:0720 |
| RHEL 3 | mikmod +1 | 3.1.6-23.el3 | RHSA-2010:0720 |
Advisories 2
- RHSA-2010:0720 Red Hat Security Advisory: mikmod security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-2071-1 libmikmod - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- MDVSA-2010:151 vendor-advisory
- http://forums.winamp.com/showthread.php?threadid=315355
- ADV-2010-1107 vdb-entry
- SUSE-SR:2010:011 vendor-advisory
- 37374 vdb-entry
- 37495 third-party-advisory
- ADV-2009-3575 vdb-entry
- 20091217 Secunia Research: Winamp Ultratracker File Parsing Buffer Overflow mailing-list
- http://secunia.com/secunia_research/2009-56/
- http://secunia.com/secunia_research/2009-55/