| Package | Affected versions | Patched versions |
|---|---|---|
| dumb | ≤ 0.9.3 |
Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted attackers to execute arbitrary code via a ".it" (Impulse Tracker) file with an envelope with a large number of nodes.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free