CVE-2011-2911 | Vulnetix

CVE-2011-2911 PUBLISHED CVSS 6.800000190734863 MEDIUM

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.

EPSS 4.35% · 91.0th percentile

Risk Scores

CVSS 2.0

6.800000190734863

EPSS Score

4.35%

91.0th percentile

Affected Products

Vendor	Product	Versions
konstanty_bialkowski	libmodplug	0.8.6, 0, 0.8
n/a	n/a	n/a

Timeline

Jun 7, 2012 CVE Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
Jul 13, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Oct 27, 2022 EPSS Score
Feb 10, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 4, 2023 EPSS Score
Jul 19, 2023 EPSS Score
Sep 9, 2023 EPSS Score
Nov 1, 2023 EPSS Score

References

http://sourceforge.net/projects/modplug-xmms/files/libmodplug/0.8.8.4/ url
openSUSE-SU-2011:0943 vendor-advisory
48979 vdb
45901 third-party-advisory
45658 third-party-advisory
45131 third-party-advisory
45742 third-party-advisory
USN-1255-1 vendor-advisory
RHSA-2011:1264 vendor-advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063786.html technical
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066044.html technical
http://secunia.com/advisories/46793 advisory
http://secunia.com/advisories/48434 advisory
http://www.openwall.com/lists/oss-security/2011/08/12/4 technical
https://exchange.xforce.ibmcloud.com/vulnerabilities/68983 technical
http://jira.atheme.org/browse/AUDPLUG-394 technical
http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms%3Ba=commitdiff%3Bh=2d4c56de314ab13e4437bd8b609f0b751066eee8 technical
http://www.gentoo.org/security/en/glsa/glsa-201203-14.xml technical
http://www.gentoo.org/security/en/glsa/glsa-201203-16.xml technical
http://www.openwall.com/lists/oss-security/2011/08/10/4 technical

…and 9 more

Open in Interactive Console →