openSUSE-SU-2011:0551Vendor advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060520.html CVE-2011-1761
Libmodplug 0.8.8.2 - '.abc' Stack Buffer Overflow (PoC)
Record summary
CVE-2011-1761 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.
Description
Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in libmodplug before 0.8.8.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ABC file. NOTE: some of these details are obtained from third party information.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBLibmodplug 0.8.8.2 - '.abc' Stack Buffer Overflow (PoC)ExploitDB exploitby epiphantNot analyzed1 file
References
Showing 12 of 14openSUSE-SU-2011:0943Vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html 44388Third-party advisory
http://secunia.com/advisories/44388 44695Third-party advisory
http://secunia.com/advisories/44695 44870Third-party advisory
http://secunia.com/advisories/44870 45742Third-party advisory
http://secunia.com/advisories/45742 48058Third-party advisory
http://secunia.com/advisories/48058 USN-1148-1Vendor advisory
http://ubuntu.com/usn/usn-1148-1 DSA-2415Vendor advisory
http://www.debian.org/security/2012/dsa-2415 17222exploit
http://www.exploit-db.com/exploits/17222 [oss-security] 20120502 CVE request: libmodplugin stack-buffer overflowmailing list
http://www.openwall.com/lists/oss-security/2011/05/02/1 [oss-security] 20120502 Re: CVE request: libmodplugin stack-buffer overflowmailing list
http://www.openwall.com/lists/oss-security/2011/05/02/19