CVE-2013-4233

Integer overflow in the abc_set_parts function in load_abc.cpp in libmodplug 0.8.8.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted P header in an ABC file, which triggers a heap-based buffer overflow.

Affected Software

Name	Vendor	Start Version	End Version
Libmodplug	Konstanty_bialkowski	*	0.8.8.4 (including)
Libmodplug	Konstanty_bialkowski	0.8 (including)	0.8 (including)
Libmodplug	Konstanty_bialkowski	0.8.4 (including)	0.8.4 (including)
Libmodplug	Konstanty_bialkowski	0.8.5 (including)	0.8.5 (including)
Libmodplug	Konstanty_bialkowski	0.8.6 (including)	0.8.6 (including)
Libmodplug	Konstanty_bialkowski	0.8.7 (including)	0.8.7 (including)
Libmodplug	Konstanty_bialkowski	0.8.8 (including)	0.8.8 (including)
Libmodplug	Konstanty_bialkowski	0.8.8.1 (including)	0.8.8.1 (including)
Libmodplug	Konstanty_bialkowski	0.8.8.2 (including)	0.8.8.2 (including)
Libmodplug	Konstanty_bialkowski	0.8.8.3 (including)	0.8.8.3 (including)
Libmodplug	Ubuntu	artful	*
Libmodplug	Ubuntu	lucid	*
Libmodplug	Ubuntu	precise	*
Libmodplug	Ubuntu	quantal	*
Libmodplug	Ubuntu	raring	*
Libmodplug	Ubuntu	saucy	*
Libmodplug	Ubuntu	utopic	*
Libmodplug	Ubuntu	vivid	*
Libmodplug	Ubuntu	wily	*
Libmodplug	Ubuntu	yakkety	*
Libmodplug	Ubuntu	zesty	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2013-4233
CWE	https://cwe.mitre.org/data/definitions/189.html

Affected Software

References