Multiple vulnerabilities have been found in ModPlug XMMS Plugin, worst of which allows remote attackers to execute arbitrary code.

Announced

2014-08-16

Revised

2014-08-16

Access

remote

Bugs

#480388

Advisory

https://security.gentoo.org/glsa/201408-07

Affected packages

Package	Arch	Vulnerable	Unaffected
media-libs/libmodplug	*	< 0.8.8.5	>= 0.8.8.5

Background

ModPlug XMMS Plugin is a library for playing MOD-like music files

Description

Multiple vulnerabilities have been discovered in ModPlug XMMS Plugin. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All ModPlug XMMS Plugin users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/libmodplug-0.8.8.5"

References

• CVE-2013-4233
• CVE-2013-4234

Multiple vulnerabilities in ModPlug could result in execution of arbitrary code or Denial of Service.

Announced

2012-03-16

Revised

2012-03-16 (revision 2)

Access

remote

Bugs

#362503 #379557

Advisory

https://security.gentoo.org/glsa/201203-16

Affected packages

Package	Arch	Vulnerable	Unaffected
media-libs/libmodplug	*	< 0.8.8.4	>= 0.8.8.4

Background

ModPlug is a library for playing MOD-like music.

Description

Multiple vulnerabilities have been found in ModPlug:

• The ReadS3M method in load_s3m.cpp fails to validate user-supplied information, which could cause a stack-based buffer overflow (CVE-2011-1574).
• The "CSoundFile::ReadWav()" function in load_wav.cpp contains an integer overflow which could cause a heap-based buffer overflow (CVE-2011-2911).
• The "CSoundFile::ReadS3M()" function in load_s3m.cpp contains multiple boundary errors which could cause a stack-based buffer overflow (CVE-2011-2912).
• The "CSoundFile::ReadAMS()" function in load_ams.cpp contains an off-by-one error which could cause memory corruption (CVE-2011-2913).
• The "CSoundFile::ReadDSM()" function in load_dms.cpp contains an off-by-one error which could cause memory corruption (CVE-2011-2914).
• The "CSoundFile::ReadAMS2()" function in load_ams.cpp contains an off-by-one error which could cause memory corruption (CVE-2011-2915).

Impact

A remote attacker could entice a user to open a specially crafted media file, possibly resulting in execution of arbitrary code, or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All ModPlug users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/libmodplug-0.8.8.4"

NOTE: This is a legacy GLSA. Updates for all affected architectures are available since August 27, 2011. It is likely that your system is already no longer affected by this issue.

References

• CVE-2011-1574
• CVE-2011-2911
• CVE-2011-2912
• CVE-2011-2913
• CVE-2011-2914
• CVE-2011-2915

ModPlug contains several buffer overflows that could lead to the execution of arbitrary code.

Announced

2009-07-12

Revised

2009-07-12

Access

remote

Bugs

#266913

Advisory

https://security.gentoo.org/glsa/200907-07

Affected packages

Package	Arch	Vulnerable	Unaffected
media-libs/gst-plugins-bad	*	< 0.10.11	>= 0.10.11
media-libs/libmodplug	*	< 0.8.7	>= 0.8.7

Background

ModPlug is a library for playing MOD-like music.

Description

Two vulnerabilities have been reported in ModPlug:

• dummy reported an integer overflow in the CSoundFile::ReadMed() function when processing a MED file with a crafted song comment or song name, which triggers a heap-based buffer overflow (CVE-2009-1438).
• Manfred Tremmel and Stanislav Brabec reported a buffer overflow in the PATinst() function when processing a long instrument name (CVE-2009-1513).

The GStreamer Bad plug-ins (gst-plugins-bad) before 0.10.11 built a vulnerable copy of ModPlug.

Impact

A remote attacker could entice a user to read specially crafted files, possibly resulting in the execution of arbitrary code with the privileges of the user running the application.

Workaround

There is no known workaround at this time.

Resolution

All ModPlug users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/libmodplug-0.8.7"

gst-plugins-bad 0.10.11 and later versions do not include the ModPlug plug-in (it has been moved to media-plugins/gst-plugins-modplug). All gst-plugins-bad users should upgrade to the latest version and install media-plugins/gst-plugins-modplug:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/gst-plugins-bad-0.10.11"
# emerge --ask --verbose "media-plugins/gst-plugins-modplug"

References

• CVE-2009-1438
• CVE-2009-1513

ModPlug contains several boundary errors that could lead to buffer overflows resulting in the possible execution of arbitrary code.

Announced

2006-12-10

Revised

2006-12-10

Access

remote

Bugs

#143404

Advisory

https://security.gentoo.org/glsa/200612-04

Affected packages

Package	Arch	Vulnerable	Unaffected
media-libs/libmodplug	*	< 0.8-r1	>= 0.8-r1

Background

ModPlug is a library for playing MOD-like music.

Description

Luigi Auriemma has reported various boundary errors in load_it.cpp and a boundary error in the "CSoundFile::ReadSample()" function in sndfile.cpp.

Impact

A remote attacker can entice a user to read crafted modules or ITP files, which may trigger a buffer overflow resulting in the execution of arbitrary code with the privileges of the user running the application.

Workaround

There is no known workaround at this time.

Resolution

All ModPlug users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/libmodplug-0.8-r1"

References

• CVE-2006-4192