CVE

Id
45555  
CVE No.
CVE-2010-2971  
Status
Candidate  
Description
loaders/load_it.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of name##env relative to name##tick and name##node, which allows remote attackers to trigger a buffer over-read and possibly have unspecified other impact via a crafted Impulse Tracker file, a related issue to CVE-2010-2546. NOTE: this issue exists because of an incomplete fix for CVE-2009-3995.  
Phase
Assigned (20100804)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
496292 45555 CVE-2010-2971 MISC:http://sourceforge.net/tracker/?func=detail&aid=3033086&group_id=40531&atid=428227  View
496293 45555 CVE-2010-2971 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=614643  View
496294 45555 CVE-2010-2971 DEBIAN:DSA-2081  View
496295 45555 CVE-2010-2971 URL:http://www.debian.org/security/2010/dsa-2081  View
496296 45555 CVE-2010-2971 MANDRIVA:MDVSA-2010:151  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38459 JVNDB-2010-004244 Cisco UWN Solution におけるパスワードを読まれる脆弱性 Cisco Unified Wireless Network (UWN) Solution は、複数の SSH セッションを適切に処理しないため、パスワードを読まれる脆弱性が存在します。 CVE-2010-2975 45555 2.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004244.html  View