| Package | Affected versions | Patched versions |
|---|---|---|
| libmikmod | = 3.1.10-1= 3.1.10-2= 3.1.10-3= 3.1.10-4= 3.1.10-5= 3.1.11-1= 3.1.11-2= 3.1.11-3= 3.1.11-4= 3.1.11-5= 3.1.11-6= 3.1.12= 3.1.9-1= 3.1.9-2= 3.1.9-3= 3.1.9-4= 3.1.9-5= 3.1.9-6= 3.2.0 |
libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free