Unscored severity · published Jul 27, 2006
CVE-2006-3879
Integer overflow in the loadChunk function in loaders/load_gt2.c in libmikmod in Mikmod Sound System 3.2.2 allows remote attackers to cause a denial of service via a GRAOUMF…
–
CVSS
9.5%
EPSS
No
On KEV
Description
Integer overflow in the loadChunk function in loaders/load_gt2.c in libmikmod in Mikmod Sound System 3.2.2 allows remote attackers to cause a denial of service via a GRAOUMF TRACKER (GT2) module file with a large (0xffffffff) comment length value in an XCOM chunk.
Exploitation
Is it being used?
Exploit prediction (EPSS)9.5% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MI
Mikmod · Miod Vallat
3.0.3; 3.1.6; 3.1.7; 3.1.8; 3.1.9; 3.1.10; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3879
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3879
Exploit
http://aluigi.altervista.org/adv/lmmgt2ho-adv.txt
Exploit
http://aluigi.org/poc/lmmgt2ho.zip
Vendor Advisory
http://secunia.com/advisories/21196
securityreason.com
http://securityreason.com/securityalert/1288
www.securityfocus.com
http://www.securityfocus.com/archive/1/441006/100/0/threaded
Exploit
http://www.securityfocus.com/bid/19134
More from Mikmod
–
CVE-2003-0427
Buffer overflow in mikmod 3.1.6 and earlier allows remote attackers to execute arbitrary code via an archive file that contains a file with a long filename