CVE-2010-2546

Multiple heap-based buffer overflows in loaders/loadit.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and ITProcessEnvelope. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-3995.

References

Affected packages

Debian:11 / libmikmod

Package

Name: libmikmod
Purl: pkg:deb/debian/libmikmod?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.1.11-6.3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / libmikmod

Package

Name: libmikmod
Purl: pkg:deb/debian/libmikmod?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.1.11-6.3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / libmikmod

Package

Name: libmikmod
Purl: pkg:deb/debian/libmikmod?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.1.11-6.3

Ecosystem specific

{
    "urgency": "not yet assigned"
}