CVE-2013-1980

extended_module_player < 4.0.4 - Buffer Overflow in MASI File Parser

Title source: llm
STIX 2.1

Description

Buffer overflow in the get_dsmp function in loaders/masi_load.c in libxmp before 4.1.0 allows remote attackers to execute arbitrary code via a crafted MASI file.

References (7)

Core 7
Core References
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/04/22/12
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=954658
Exploit, Patch x_refsource_confirm
https://build.opensuse.org/request/show/174356
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/53114
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/59355

Scores

EPSS 0.0370
EPSS Percentile 88.4%

Details

CWE
CWE-119
Status published
Products (5)
extended_module_player_project/extended_module_player 4.0.0
extended_module_player_project/extended_module_player 4.0.1
extended_module_player_project/extended_module_player 4.0.2
extended_module_player_project/extended_module_player 4.0.3
extended_module_player_project/extended_module_player < 4.0.4
Published Feb 11, 2014
Tracked Since Feb 18, 2026