CVEvulnerability
CVE-2007-6720
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-01-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Description
libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels.
Affected configurations
• igno saitz libmikmod 3.1.9-1
• igno saitz libmikmod 3.1.9-2
• igno saitz libmikmod 3.1.9-3
• igno saitz libmikmod 3.1.9-4
• igno saitz libmikmod 3.1.9-5
• igno saitz libmikmod 3.1.9-6
• igno saitz libmikmod 3.1.10-1
• igno saitz libmikmod 3.1.10-2
• igno saitz libmikmod 3.1.10-3
• igno saitz libmikmod 3.1.10-4
• igno saitz libmikmod 3.1.10-5
• igno saitz libmikmod 3.1.11-1
• igno saitz libmikmod 3.1.11-2
• igno saitz libmikmod 3.1.11-3
• igno saitz libmikmod 3.1.11-4
• igno saitz libmikmod 3.1.11-5
• igno saitz libmikmod 3.1.11-6
• igno saitz libmikmod 3.1.12
• igno saitz libmikmod 3.2.0
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=422021 bugs.debian.org
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=461519 bugs.debian.org
- http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html lists.opensuse.org
- http://openwall.com/lists/oss-security/2009/01/13/2 openwall.com
- http://secunia.com/advisories/34259 secunia.com
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html www.oracle.com
- http://www.securityfocus.com/bid/33235 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=479829 bugzilla.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01305.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01312.html www.redhat.com
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=422021 bugs.debian.org
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=461519 bugs.debian.org
- http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html lists.opensuse.org
- http://openwall.com/lists/oss-security/2009/01/13/2 openwall.com
- http://secunia.com/advisories/34259 secunia.com
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html www.oracle.com
- http://www.securityfocus.com/bid/33235 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=479829 bugzilla.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01305.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01312.html www.redhat.com