← Back to branch summary

~ubuntu-security/ubuntu-cve-tracker/master

« back to all changes in this revision

Viewing changes to retired/CVE-2011-2914

  • Committer: Steve Beattie
  • Date: 2019-02-19 06:18:27 UTC
  • Revision ID: sbeattie@ubuntu.com-20190219061827-oh57fzcfc1u9dlfk
The ubuntu-cve-tracker project has been converted to git.

Please use 'git clone https://git.launchpad.net/ubuntu-cve-tracker' to
get the converted tree.

Show diffs side-by-side

added added

removed removed

Lines of Context:
retired/CVE-2011-2914
1
 
PublicDateAtUSN: 2011-10-06
2
 
Candidate: CVE-2011-2914
3
 
PublicDate: 2012-06-07
4
 
References: 
5
 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2914
6
 
 http://thread.gmane.org/gmane.comp.security.oss.general/5685/focus=5706
7
 
 https://usn.ubuntu.com/usn/usn-1255-1
8
 
Description:
9
 
 Off-by-one error in the CSoundFile::ReadDSM function in src/load_dms.cpp in
10
 
 libmodplug before 0.8.8.4 allows remote attackers to cause a denial of
11
 
 service (memory corruption) and possibly execute arbitrary code via a
12
 
 crafted DSM file with a large number of samples.
13
 
Ubuntu-Description: 
14
 
Notes: 
15
 
Bugs: 
16
 
 https://bugzilla.redhat.com/show_bug.cgi?id=728371
17
 
Priority: medium
18
 
Discovered-by:
19
 
Assigned-to: mdeslaur
20
 
 
21
 
Patches_libmodplug:
22
 
 upstream: http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commitdiff;h=26243ab9fe1171f70053e9aec4b20e9f7de9e4ef
23
 
upstream_libmodplug: released (0.8.8.4)
24
 
hardy_libmodplug: ignored (reached end-of-life)
25
 
lucid_libmodplug: released (1:0.8.7-1ubuntu0.3)
26
 
maverick_libmodplug: released (1:0.8.8.1-1ubuntu1.3)
27
 
natty_libmodplug: released (1:0.8.8.1-2ubuntu0.3)
28
 
oneiric_libmodplug: released (1:0.8.8.2-3ubuntu1.1)
29
 
devel_libmodplug: not-affected (1:0.8.8.4-1)
30
 
 
31
 
Patches_gst-plugins-bad0.10:
32
 
upstream_gst-plugins-bad0.10: needs-triage
33
 
hardy_gst-plugins-bad0.10: ignored (reached end-of-life)
34
 
lucid_gst-plugins-bad0.10: not-affected (uses system libmodplug)
35
 
maverick_gst-plugins-bad0.10: not-affected (uses system libmodplug)
36
 
natty_gst-plugins-bad0.10: not-affected (uses system libmodplug)
37
 
oneiric_gst-plugins-bad0.10: not-affected (uses system libmodplug)
38
 
devel_gst-plugins-bad0.10: not-affected (uses system libmodplug)