CVE-2006-3879
Mikmod Sound System 3.2.2 - Denial of Service via GT2 Module XCOM Chunk Comment Length
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-3879. PoCs published by Luigi Auriemma.
AI-analyzed exploit summary This exploit targets a heap overflow vulnerability in libmikmod <= 3.2.2 by crafting a malicious GT2 file. The overflow occurs due to incorrect handling of the XCOM chunk size, leading to potential remote code execution.
Description
Integer overflow in the loadChunk function in loaders/load_gt2.c in libmikmod in Mikmod Sound System 3.2.2 allows remote attackers to cause a denial of service via a GRAOUMF TRACKER (GT2) module file with a large (0xffffffff) comment length value in an XCOM chunk.
Exploits (1)
This exploit targets a heap overflow vulnerability in libmikmod <= 3.2.2 by crafting a malicious GT2 file. The overflow occurs due to incorrect handling of the XCOM chunk size, leading to potential remote code execution.