#VU33121 Stack-based buffer overflow - CVE-2011-2912
Vulnerability identifier: #VU33121
Vulnerability risk: Medium
CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID:
CWE-ID:
CWE-121
Exploitation vector: Network
Exploit availability: No
Description
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within the CSoundFile::ReadS3M function in src/load_s3m.cpp when processing a crafted S3M file with an invalid offset. A remote unauthenticated attacker can trigger stack-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Mitigation
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
External links
https://jira.atheme.org/browse/AUDPLUG-394
https://lists.fedoraproject.org/pipermail/package-announce/2011-August/063786.html
https://lists.fedoraproject.org/pipermail/package-announce/2011-September/066044.html
https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html
https://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commitdiff;h=f4e5295658fff000379caa122e75c9200205fe20
https://rhn.redhat.com/errata/RHSA-2011-1264.html
https://secunia.com/advisories/45131
https://secunia.com/advisories/45658
https://secunia.com/advisories/45742
https://secunia.com/advisories/45901
https://secunia.com/advisories/46032
https://secunia.com/advisories/46043
https://secunia.com/advisories/46793
https://secunia.com/advisories/48058
https://secunia.com/advisories/48434
https://secunia.com/advisories/48439
https://sourceforge.net/projects/modplug-xmms/files/libmodplug/0.8.8.4/
https://ubuntu.com/usn/usn-1255-1
https://www.debian.org/security/2012/dsa-2415
https://www.gentoo.org/security/en/glsa/glsa-201203-14.xml
https://www.gentoo.org/security/en/glsa/glsa-201203-16.xml
https://www.openwall.com/lists/oss-security/2011/08/10/4
https://www.openwall.com/lists/oss-security/2011/08/12/4
https://www.osvdb.org/74209
https://www.securityfocus.com/bid/48979
https://exchange.xforce.ibmcloud.com/vulnerabilities/68984
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
