NVD

Id
14401  
Name
CVE-2010-2971  
Description
loaders/load_it.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of name##env relative to name##tick and name##node, which allows remote attackers to trigger a buffer over-read and possibly have unspecified other impact via a crafted Impulse Tracker file, a related issue to CVE-2010-2546. NOTE: this issue exists because of an incomplete fix for CVE-2009-3995.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-08-05  
Modified Date
2010-08-20  
Seq
2010-2971  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
79798 14401 CVE-2010-2971 http://sourceforge.net/tracker/?func=detail&aid=3033086&group_id=40531&atid=428227  View
79799 14401 CVE-2010-2971 DSA-2081  View
79800 14401 CVE-2010-2971 MDVSA-2010:151  View
79801 14401 CVE-2010-2971 https://bugzilla.redhat.com/show_bug.cgi?id=614643  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39831 JVNDB-2010-005616 libmikmod の loaders/load_it.c におけるバッファオーバーリードを誘発される脆弱性 libmikmod の loaders/load_it.c は、name##tick および name##node を考慮して、より大きいサイズの name##env を適切に計算しないため、バッファオーバーリードを誘発されるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2010-2971 45551 CVE-2010-2971 14401 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005616.html 2010-08-05 2012-12-20 View