CVE-2011-2914

Description

Off-by-one error in the CSoundFile::ReadDSM function in src/load_dms.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted DSM file with a large number of samples.

Affected packages (1)

• Debian/libmodplugfrom 0, < 1:0.8.8.4-1

References (1)

• ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2011-2914