Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in libmodplug before 0.8.8.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ABC file. NOTE: some of these details are obtained from third party information.
2012-06-07T19:55:02.883
2025-04-11T00:51:21.963
Deferred
CVSSv2: 6.8 (MEDIUM)
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.6
6.4
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | konstanty_bialkowski | libmodplug | ≤ 0.8.8.2 | Yes |
Application | konstanty_bialkowski | libmodplug | 0.8 | Yes |
Application | konstanty_bialkowski | libmodplug | 0.8.4 | Yes |
Application | konstanty_bialkowski | libmodplug | 0.8.5 | Yes |
Application | konstanty_bialkowski | libmodplug | 0.8.6 | Yes |
Application | konstanty_bialkowski | libmodplug | 0.8.7 | Yes |
Application | konstanty_bialkowski | libmodplug | 0.8.8 | Yes |
Application | konstanty_bialkowski | libmodplug | 0.8.8.1 | Yes |