CVE-2009-1513
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name.
Desbordamiento de búfer en la función PATinst en src/load_pat.cpp en libmodplug anteriores a v0.8.7 permite a atacantes remotos asistidos por usuarios, provocar una denegación de servicio y posiblemente la ejecución de código de su elección mediante un nombre de instrumento largo.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2009-05-04 CVE Reserved
- 2009-05-04 CVE Published
- 2024-08-07 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (17)
| URL | Tag | Source |
|---|---|---|
| http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526084 | X_refsource_confirm | |
| http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_pat.cpp?r1=1.3&r2=1.4 | X_refsource_confirm | |
| http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms%3Ba=commitdiff%3Bh=c4ebb701be6ee9a296a44fdac5a20b7739ff0595 | X_refsource_confirm | |
| http://osvdb.org/54109 | Vdb Entry | |
| http://secunia.com/advisories/35026 | Third Party Advisory | |
| http://secunia.com/advisories/35736 | Third Party Advisory | |
| http://secunia.com/advisories/36158 | Third Party Advisory | |
| http://www.openwall.com/lists/oss-security/2009/04/29/5 | Mailing List |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/34927 | 2023-11-07 | |
| http://security.gentoo.org/glsa/glsa-200907-07.xml | 2023-11-07 | |
| http://www.debian.org/security/2009/dsa-1850 | 2023-11-07 | |
| http://www.mandriva.com/security/advisories?name=MDVSA-2009:128 | 2023-11-07 | |
| http://www.ubuntu.com/usn/USN-771-1 | 2023-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Konstanty Bialkowski Search vendor "Konstanty Bialkowski" | Libmodplug Search vendor "Konstanty Bialkowski" for product "Libmodplug" | <= 0.8.6 Search vendor "Konstanty Bialkowski" for product "Libmodplug" and version " <= 0.8.6" | - |
Affected
| ||||||
| Konstanty Bialkowski Search vendor "Konstanty Bialkowski" | Libmodplug Search vendor "Konstanty Bialkowski" for product "Libmodplug" | 0.8 Search vendor "Konstanty Bialkowski" for product "Libmodplug" and version "0.8" | - |
Affected
| ||||||
| Konstanty Bialkowski Search vendor "Konstanty Bialkowski" | Libmodplug Search vendor "Konstanty Bialkowski" for product "Libmodplug" | 0.8.4 Search vendor "Konstanty Bialkowski" for product "Libmodplug" and version "0.8.4" | - |
Affected
| ||||||
| Konstanty Bialkowski Search vendor "Konstanty Bialkowski" | Libmodplug Search vendor "Konstanty Bialkowski" for product "Libmodplug" | 0.8.5 Search vendor "Konstanty Bialkowski" for product "Libmodplug" and version "0.8.5" | - |
Affected
| ||||||