NVD

Id
9632  
Name
CVE-2011-2914  
Description
Off-by-one error in the CSoundFile::ReadDSM function in src/load_dms.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted DSM file with a large number of samples.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2012-06-07  
Modified Date
2016-12-21  
Seq
2011-2914  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
55069 9632 CVE-2011-2914 http://jira.atheme.org/browse/AUDPLUG-394  View
55070 9632 CVE-2011-2914 FEDORA-2011-10503  View
55071 9632 CVE-2011-2914 FEDORA-2011-12370  View
55072 9632 CVE-2011-2914 openSUSE-SU-2011:0943  View
55073 9632 CVE-2011-2914 http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commitdiff;h=26243ab9fe1171f70053e9aec4b20e9f7de9e4ef  View
55074 9632 CVE-2011-2914 RHSA-2011:1264  View
55075 9632 CVE-2011-2914 http://sourceforge.net/projects/modplug-xmms/files/libmodplug/0.8.8.4/  View
55076 9632 CVE-2011-2914 USN-1255-1  View
55077 9632 CVE-2011-2914 DSA-2415  View
55078 9632 CVE-2011-2914 GLSA-201203-14  View
55079 9632 CVE-2011-2914 GLSA-201203-16  View
55080 9632 CVE-2011-2914 [oss-security] 20120810 CVE request: libmodplug: multiple vulnerabilities reported in <= 0.8.8.3  View
55081 9632 CVE-2011-2914 [oss-security] 20120812 Re: CVE request: libmodplug: multiple vulnerabilities reported in <= 0.8.8.3  View
55082 9632 CVE-2011-2914 74211  View
55083 9632 CVE-2011-2914 48979  View
55084 9632 CVE-2011-2914 libmodplug-dsm-code-execution(68986)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26932 JVNDB-2012-002639 libmodplug の CSoundFile::ReadDSM 関数における一つずれエラーの脆弱性 libmodplug の src/load_dms.cpp 内の CSoundFile::ReadDSM 関数には、一つずれ (Off-by-one) エラーの脆弱性が存在します。 CVE-2011-2914 50821 CVE-2011-2914 9632 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002639.html 2012-06-07 2012-06-11 View