CVE-2011-2914 in libmodpluginfo

Summary

Off-by-one error in the CSoundFile::ReadDSM function in src/load_dms.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted DSM file with a large number of samples.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

07/27/2011

Disclosure

06/07/2012

Entries

1

CPE

ready

CVSS

7.3

EPSS

0.03303

CTI

None

Sources

Do you want to use VulDB in your project?

Use the official API to access entries easily!