Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MODPlug Tracker多个缓冲区溢出漏洞
Vulnerability Description
MODPlug Tracker(也称为OpenMPT)允许用户在基于Windows的PC上创建音乐。 MODPlug Tracker (OpenMPT) 1.17.02.43及早期版本和libmodplug 0.8及早期版本的ReadITProject函数没有过滤ITP文件中的文本字段，导致存在多个缓冲区溢出漏洞。远程攻击者可借助ITP文件中的超长字符串覆盖全局变量，执行恶意代码。请注意libmodplug中不支持ITP文件。
CVSS Information
N/A
Vulnerability Type
N/A