oss-sec mailing list archives
CVE request: libmodplugin stack-buffer overflow
From: Huzaifa Sidhpurwala <huzaifas () redhat com>
Date: Mon, 02 May 2011 11:40:00 +0530
Some details and exploit at: http://www.exploit-db.com/exploits/17222/
From an initial look, it seems that applications embedding libmodplug,
sp gstreamer-plugins may not be affected, since it seems to be doing some parameter checking before hand. Can a CVE be assigned to this please? -- Huzaifa Sidhpurwala / Red Hat Security Response Team
Current thread:
- CVE request: libmodplugin stack-buffer overflow Huzaifa Sidhpurwala (May 01)
- Re: CVE request: libmodplugin stack-buffer overflow Josh Bressers (May 02)