Vulnetix
Try Vulnetix Request Demo
CVE-2010-2546 PUBLISHED CVSS 9.300000190734863 CRITICAL

Multiple heap-based buffer overflows in loaders/load_it.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and IT_ProcessEnvelope. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-3995.

EPSS 5.68% · 90.3th percentile

Risk Scores

CVSS v2.0
9.300000190734863
EPSS Score
5.68%
90.3th percentile

Affected Products

VendorProductVersions
raphael_assenatlibmikmod3.1.12
n/an/an/a

Timeline

References

Open in Interactive Console →