CVE-2006-3879

Published Jul 27, 2006

Last updated 6 years ago

Overview

Description: Integer overflow in the loadChunk function in loaders/load_gt2.c in libmikmod in Mikmod Sound System 3.2.2 allows remote attackers to cause a denial of service via a GRAOUMF TRACKER (GT2) module file with a large (0xffffffff) comment length value in an XCOM chunk.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

nvd@nist.gov: CWE-189

Vendor comments

Red HatThis issue does not affect versions of Mikmod 3.2.0-beta2 or prior. Versions of Mikmod distributed with Red Hat Enterprise Linux 2.1, 3, and 4 are based on version 3.1.11 and are therefore not vulnerable to this issue.

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:miod_vallat:mikmod:3.0.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "85890D01-923A-48A3-A0ED-61C68EBC3B59"
          },
          {
            "criteria": "cpe:2.3:a:miod_vallat:mikmod:3.1.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D6726186-70B0-497A-93FA-CED6A6BFEF83"
          },
          {
            "criteria": "cpe:2.3:a:miod_vallat:mikmod:3.1.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3E045CD1-4342-4EC6-A9BC-81160F71F4FC"
          },
          {
            "criteria": "cpe:2.3:a:miod_vallat:mikmod:3.1.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F7E29D51-7EC4-49AB-9663-1DE0791E4A42"
          },
          {
            "criteria": "cpe:2.3:a:miod_vallat:mikmod:3.1.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B6E6DA86-55B8-475F-93DC-B191BD2C0ADD"
          },
          {
            "criteria": "cpe:2.3:a:miod_vallat:mikmod:3.1.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0C46A1FE-DE05-4C29-AE38-52431D85DD65"
          },
          {
            "criteria": "cpe:2.3:a:miod_vallat:mikmod:3.1.11:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0DE1B84B-9D48-4AFA-B586-BAC4C54B5B6C"
          },
          {
            "criteria": "cpe:2.3:a:miod_vallat:mikmod:3.2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A49F98BB-8909-404D-B8FC-5F9177958691"
          },
          {
            "criteria": "cpe:2.3:a:miod_vallat:mikmod:3.2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8C6D083B-7E2B-424D-A762-8461D265B2E3"
          },
          {
            "criteria": "cpe:2.3:a:miod_vallat:mikmod:3.2.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "29B60348-03A0-42E8-ABA5-8A4F38334FEE"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Vendor comments

Configurations

References