VDB
CVE-2009-1513
CVE-2009-1513
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name.
EPSS 4.10% · 90.7th percentile
Risk Scores
CVSS 2.0
6.800000190734863
EPSS Score
4.10%
90.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| konstanty_bialkowski | libmodplug | 0, 0.8, 0.8.4 |
Timeline
- May 4, 2009 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
- Sep 21, 2023 EPSS Score
References
- http://secunia.com/advisories/34927 url
- http://secunia.com/advisories/35026 url
- http://secunia.com/advisories/35736 url
- http://secunia.com/advisories/36158 url
- 34747 vdb
- [oss-security] 20090429 Re: CVE Request -- libmodplug mailing-list
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526084 url
- GLSA-200907-07 vendor-advisory
- http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms%3Ba=commitdiff%3Bh=c4ebb701be6ee9a296a44fdac5a20b7739ff0595 url
- http://sourceforge.net/project/shownotes.php?release_id=678622&group_id=1275 url
- USN-771-1 vendor-advisory
- DSA-1850 vendor-advisory
- http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_pat.cpp?r1=1.3&r2=1.4 url
- http://sourceforge.net/tracker/?func=detail&aid=2777467&group_id=1275&atid=301275 url
- MDVSA-2009:128 vendor-advisory
- 54109 vdb
- ADV-2009-1200 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2009-1513 advisory
- http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms;a=commitdiff;h=c4ebb701be6ee9a296a44fdac5a20b7739ff0595 url