Vulnerability Details CVE-2006-3879
Integer overflow in the loadChunk function in loaders/load_gt2.c in libmikmod in Mikmod Sound System 3.2.2 allows remote attackers to cause a denial of service via a GRAOUMF TRACKER (GT2) module file with a large (0xffffffff) comment length value in an XCOM chunk.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.07
EPSS Ranking 91.1%
CVSS Severity
CVSS v2 Score 5.0
References
- http://aluigi.altervista.org/adv/lmmgt2ho-adv.txt
- http://aluigi.org/poc/lmmgt2ho.zip
- http://secunia.com/advisories/21196
- http://securityreason.com/securityalert/1288
- http://www.securityfocus.com/archive/1/441006/100/0/threaded
- http://www.securityfocus.com/bid/19134
- http://www.vupen.com/english/advisories/2006/2967
- http://aluigi.altervista.org/adv/lmmgt2ho-adv.txt
- http://aluigi.org/poc/lmmgt2ho.zip
- http://secunia.com/advisories/21196
- http://securityreason.com/securityalert/1288
- http://www.securityfocus.com/archive/1/441006/100/0/threaded
- http://www.securityfocus.com/bid/19134
- http://www.vupen.com/english/advisories/2006/2967
Products affected by CVE-2006-3879
-
cpe:2.3:a:miod_vallat:mikmod:3.0.3
-
cpe:2.3:a:miod_vallat:mikmod:3.1.10
-
cpe:2.3:a:miod_vallat:mikmod:3.1.11
-
cpe:2.3:a:miod_vallat:mikmod:3.1.6
-
cpe:2.3:a:miod_vallat:mikmod:3.1.7
-
cpe:2.3:a:miod_vallat:mikmod:3.1.8
-
cpe:2.3:a:miod_vallat:mikmod:3.1.9
-
cpe:2.3:a:miod_vallat:mikmod:3.2.0
-
cpe:2.3:a:miod_vallat:mikmod:3.2.1
-
cpe:2.3:a:miod_vallat:mikmod:3.2.2