← Back to branch summary

~ubuntu-security/ubuntu-cve-tracker/master

« back to all changes in this revision

Viewing changes to retired/CVE-2011-2912

  • Committer: Steve Beattie
  • Date: 2019-02-19 06:18:27 UTC
  • Revision ID: sbeattie@ubuntu.com-20190219061827-oh57fzcfc1u9dlfk
The ubuntu-cve-tracker project has been converted to git.

Please use 'git clone https://git.launchpad.net/ubuntu-cve-tracker' to
get the converted tree.

Show diffs side-by-side

added added

removed removed

Lines of Context:
retired/CVE-2011-2912
1
 
PublicDateAtUSN: 2011-10-06
2
 
Candidate: CVE-2011-2912
3
 
PublicDate: 2012-06-07
4
 
References: 
5
 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2912
6
 
 http://thread.gmane.org/gmane.comp.security.oss.general/5685/focus=5706
7
 
 https://usn.ubuntu.com/usn/usn-1255-1
8
 
Description:
9
 
 Stack-based buffer overflow in the CSoundFile::ReadS3M function in
10
 
 src/load_s3m.cpp in libmodplug before 0.8.8.4 allows remote attackers to
11
 
 cause a denial of service and possibly execute arbitrary code via a crafted
12
 
 S3M file with an invalid offset.
13
 
Ubuntu-Description: 
14
 
Notes: 
15
 
Bugs: 
16
 
 https://bugzilla.redhat.com/show_bug.cgi?id=728371
17
 
Priority: medium
18
 
Discovered-by: Hossein Lotfi
19
 
Assigned-to: mdeslaur
20
 
 
21
 
Patches_libmodplug:
22
 
 upstream: http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commitdiff;h=f4e5295658fff000379caa122e75c9200205fe20
23
 
upstream_libmodplug: released (0.8.8.4)
24
 
hardy_libmodplug: ignored (reached end-of-life)
25
 
lucid_libmodplug: released (1:0.8.7-1ubuntu0.3)
26
 
maverick_libmodplug: released (1:0.8.8.1-1ubuntu1.3)
27
 
natty_libmodplug: released (1:0.8.8.1-2ubuntu0.3)
28
 
oneiric_libmodplug: released (1:0.8.8.2-3ubuntu1.1)
29
 
devel_libmodplug: not-affected (1:0.8.8.4-1)
30
 
 
31
 
Patches_gst-plugins-bad0.10:
32
 
upstream_gst-plugins-bad0.10: needs-triage
33
 
hardy_gst-plugins-bad0.10: ignored (reached end-of-life)
34
 
lucid_gst-plugins-bad0.10: not-affected (uses system libmodplug)
35
 
maverick_gst-plugins-bad0.10: not-affected (uses system libmodplug)
36
 
natty_gst-plugins-bad0.10: not-affected (uses system libmodplug)
37
 
oneiric_gst-plugins-bad0.10: not-affected (uses system libmodplug)
38
 
devel_gst-plugins-bad0.10: not-affected (uses system libmodplug)