| Package | Affected versions | Patched versions |
|---|---|---|
| libmodplug | = 0.8= 0.8.4= 0.8.5= 0.8.6= 0.8.7= 0.8.8= 0.8.8.1= 0.8.8.2= 0.8.8.3≤ 0.8.8.4 |
Multiple heap-based buffer overflows in the (1) abc_MIDI_drum and (2) abc_MIDI_gchord functions in load_abc.cpp in libmodplug 0.8.8.4 and earlier allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via a crafted ABC.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free