Unscored severity · published Jan 20, 2009
CVE-2007-6720
libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing…
–
CVSS
2.3%
EPSS
No
On KEV
Description
libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libmikmod · Igno Saitz
3.1.9-1; 3.1.9-2; 3.1.9-3; 3.1.9-4; 3.1.9-5; 3.1.9-6; +13 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6720
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6720
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=422021
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=461519
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html
openwall.com
http://openwall.com/lists/oss-security/2009/01/13/2
secunia.com
http://secunia.com/advisories/34259
www.oracle.com
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
More from Libmikmod
–
CVE-2009-0179
libmikmod 3.1.11 through 3.2.0, as used by MikMod and possibly other products, allows user-assisted attackers to cause a denial of service (application crash) by loading an XM…