NVD

Id
62833  
Name
CVE-2006-4192  
Description
Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-16  
Modified Date
2011-05-11  
Seq
2006-4192  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
326679 62833 CVE-2006-4192 http://aluigi.altervista.org/adv/mptho-adv.txt  View
326680 62833 CVE-2006-4192 http://cgit.freedesktop.org/gstreamer/gst-plugins-bad/commit/?id=bc2cdd57d549ab3ba59782e9b395d0cd683fd3ac  View
326681 62833 CVE-2006-4192 GLSA-200612-04  View
326682 62833 CVE-2006-4192 1397  View
326683 62833 CVE-2006-4192 MDKSA-2007:001  View
326684 62833 CVE-2006-4192 SUSE-SR:2006:023  View
326685 62833 CVE-2006-4192 20060809 Stack and heap overflows in MODPlug Tracker/OpenMPT 1.17.02.43 and libmodplug 0.8  View
326686 62833 CVE-2006-4192 19448  View
326687 62833 CVE-2006-4192 USN-521-1  View
326688 62833 CVE-2006-4192 ADV-2006-3231  View
326689 62833 CVE-2006-4192 ADV-2006-4310  View
326690 62833 CVE-2006-4192 openmpt-loadit-bo(28305)  View
326691 62833 CVE-2006-4192 openmpt-readsample-bo(28309)  View
326692 62833 CVE-2006-4192 https://bugzilla.redhat.com/show_bug.cgi?id=497154  View
326693 62833 CVE-2006-4192 RHSA-2011:0477  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58732 JVNDB-2006-000998 GStreamer などの製品で使用される MODPlug Tracker および libmodplug におけるバッファオーバーフローの脆弱性 GStreamer などの製品で使用される、MODPlug Tracker （OpenMPT） および libmodplug には、バッファオーバーフローの脆弱性が存在します。 CVE-2006-4192 20294 CVE-2006-4192 62833 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000998.html 2006-08-17 2011-05-24 View