CVEvulnerability

CVE-2007-6720

4.3 MEDIUM Published 2009-01-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-01-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P

Description

libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels.

Affected configurations

• igno saitz libmikmod 3.1.9-1 • igno saitz libmikmod 3.1.9-2 • igno saitz libmikmod 3.1.9-3 • igno saitz libmikmod 3.1.9-4 • igno saitz libmikmod 3.1.9-5 • igno saitz libmikmod 3.1.9-6 • igno saitz libmikmod 3.1.10-1 • igno saitz libmikmod 3.1.10-2 • igno saitz libmikmod 3.1.10-3 • igno saitz libmikmod 3.1.10-4 • igno saitz libmikmod 3.1.10-5 • igno saitz libmikmod 3.1.11-1 • igno saitz libmikmod 3.1.11-2 • igno saitz libmikmod 3.1.11-3 • igno saitz libmikmod 3.1.11-4 • igno saitz libmikmod 3.1.11-5 • igno saitz libmikmod 3.1.11-6 • igno saitz libmikmod 3.1.12 • igno saitz libmikmod 3.2.0

References