Red Hat Security AdvisoryRHSA-2010:0720
mikmod security update
Released 2010-09-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 mikmod-3.1.6-23.el3, mikmod-3.1.6-23.el3.i386, mikmod-devel-3.1.6-23.el3 +1
- Red Hat Enterprise Linux (v. 5 server) mikmod-3.1.6-39.el5_5.1, mikmod-3.1.6-39.el5_5.1.i386, mikmod-3.1.6-39.el5_5.1.ia64 +5
- Red Hat Enterprise Linux AS version 3 mikmod-3.1.6-23.el3, mikmod-3.1.6-23.el3.i386, mikmod-3.1.6-23.el3.ia64 +5
- Red Hat Enterprise Linux AS version 4 mikmod-3.1.6-33.el4_8.1, mikmod-3.1.6-33.el4_8.1.i386, mikmod-3.1.6-33.el4_8.1.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) mikmod-3.1.6-39.el5_5.1, mikmod-3.1.6-39.el5_5.1.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) mikmod-3.1.6-39.el5_5.1, mikmod-devel-3.1.6-39.el5_5.1, mikmod-devel-3.1.6-39.el5_5.1.i386
- Red Hat Enterprise Linux Desktop version 4 mikmod-3.1.6-33.el4_8.1, mikmod-3.1.6-33.el4_8.1.i386, mikmod-devel-3.1.6-33.el4_8.1 +1
- Red Hat Enterprise Linux ES version 3 mikmod-3.1.6-23.el3, mikmod-3.1.6-23.el3.i386, mikmod-3.1.6-23.el3.ia64 +3
- Red Hat Enterprise Linux ES version 4 mikmod-3.1.6-33.el4_8.1, mikmod-3.1.6-33.el4_8.1.i386, mikmod-3.1.6-33.el4_8.1.ia64 +3
- Red Hat Enterprise Linux WS version 3 mikmod-3.1.6-23.el3, mikmod-3.1.6-23.el3.i386, mikmod-3.1.6-23.el3.ia64 +3
- Red Hat Enterprise Linux WS version 4 mikmod-3.1.6-33.el4_8.1, mikmod-3.1.6-33.el4_8.1.i386, mikmod-3.1.6-33.el4_8.1.ia64 +3
Fixes 3 records
Priority MEDIUM 50
Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via (1) crafted samples or (2) craft…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06722 · Published 2009-12-18 · Fixed CWE-119
Priority MEDIUM 49
Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06477 · Published 2009-12-18 · Fixed CWE-119
Priority LOW 25
libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, wh…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02345 · Published 2009-01-20 · Fixed
