NVD

Id
48714  
Name
CVE-2009-1438  
Description
Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted (1) song comment or (2) song name, which triggers a heap-based buffer overflow, as exploited in the wild in August 2008.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-04-27  
Modified Date
2009-08-08  
Seq
2009-1438  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
246106 48714 CVE-2009-1438 http://bugs.gentoo.org/show_bug.cgi?id=266913  View
246107 48714 CVE-2009-1438 SUSE-SR:2009:012  View
246108 48714 CVE-2009-1438 http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_med.cpp?r1=1.1&r2=1.2  View
246109 48714 CVE-2009-1438 GLSA-200907-07  View
246110 48714 CVE-2009-1438 http://sourceforge.net/project/shownotes.php?release_id=677065&group_id=1275  View
246111 48714 CVE-2009-1438 DSA-1850  View
246112 48714 CVE-2009-1438 DSA-1851  View
246113 48714 CVE-2009-1438 MDVSA-2009:128  View
246114 48714 CVE-2009-1438 [oss-security] 20090421 CVE Request -- libmodplug  View
246115 48714 CVE-2009-1438 FEDORA-2009-4064  View
246116 48714 CVE-2009-1438 FEDORA-2009-4068  View
246117 48714 CVE-2009-1438 30801  View
246118 48714 CVE-2009-1438 USN-771-1  View
246119 48714 CVE-2009-1438 ADV-2009-1104  View
246120 48714 CVE-2009-1438 libmodplug-csoundfilereadmed-bo(50388)  View
246121 48714 CVE-2009-1438 https://bugzilla.redhat.com/show_bug.cgi?id=496834  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43601 JVNDB-2009-004608 gstreamer プラグインなどの製品に使用される libmodplug における整数オーバーフローの脆弱性 gstreamer プラグイン、TTPlayer、およびその他の製品に使用される libmodplug の CSoundFile::ReadMed 関数 (src/load_med.cpp) には、整数オーバーフローの脆弱性が存在します。 CVE-2009-1438 38869 CVE-2009-1438 48714 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004608.html 2009-04-27 2012-09-25 View