CVE Vulnerabilities

CVE-2007-6720

Published: Jan 20, 2009 | Modified: Oct 04, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
2.6 LOW
AV:N/AC:H/Au:N/C:N/I:N/A:P
RedHat/V3
Ubuntu
LOW

libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels.

Affected Software

Name Vendor Start Version End Version
Libmikmod Igno_saitz 3.1.9-1 (including) 3.1.9-1 (including)
Libmikmod Igno_saitz 3.1.9-2 (including) 3.1.9-2 (including)
Libmikmod Igno_saitz 3.1.9-3 (including) 3.1.9-3 (including)
Libmikmod Igno_saitz 3.1.9-4 (including) 3.1.9-4 (including)
Libmikmod Igno_saitz 3.1.9-5 (including) 3.1.9-5 (including)
Libmikmod Igno_saitz 3.1.9-6 (including) 3.1.9-6 (including)
Libmikmod Igno_saitz 3.1.10-1 (including) 3.1.10-1 (including)
Libmikmod Igno_saitz 3.1.10-2 (including) 3.1.10-2 (including)
Libmikmod Igno_saitz 3.1.10-3 (including) 3.1.10-3 (including)
Libmikmod Igno_saitz 3.1.10-4 (including) 3.1.10-4 (including)
Libmikmod Igno_saitz 3.1.10-5 (including) 3.1.10-5 (including)
Libmikmod Igno_saitz 3.1.11-1 (including) 3.1.11-1 (including)
Libmikmod Igno_saitz 3.1.11-2 (including) 3.1.11-2 (including)
Libmikmod Igno_saitz 3.1.11-3 (including) 3.1.11-3 (including)
Libmikmod Igno_saitz 3.1.11-4 (including) 3.1.11-4 (including)
Libmikmod Igno_saitz 3.1.11-5 (including) 3.1.11-5 (including)
Libmikmod Igno_saitz 3.1.11-6 (including) 3.1.11-6 (including)
Libmikmod Igno_saitz 3.1.12 (including) 3.1.12 (including)
Libmikmod Igno_saitz 3.2.0 (including) 3.2.0 (including)
Red Hat Enterprise Linux 3 RedHat mikmod-0:3.1.6-23.el3 *
Red Hat Enterprise Linux 4 RedHat mikmod-0:3.1.6-33.el4_8.1 *
Red Hat Enterprise Linux 5 RedHat mikmod-0:3.1.6-39.el5_5.1 *
Libmikmod Ubuntu dapper *
Libmikmod Ubuntu gutsy *
Libmikmod Ubuntu hardy *
Libmikmod Ubuntu intrepid *
Libmikmod Ubuntu jaunty *
Libmikmod Ubuntu karmic *
Libmikmod Ubuntu upstream *

References