Rapid7 Vulnerability & Exploit Database

RHSA-2010:0720: mikmod security update

Back to Search

RHSA-2010:0720: mikmod security update

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
12/18/2009
Created
07/25/2018
Added
10/14/2010
Modified
07/04/2017

Description

MikMod is a MOD music file player for Linux, UNIX, and similar operatingsystems. It supports various file formats including MOD, STM, S3M, MTM, XM,ULT, and IT.Multiple input validation flaws, resulting in buffer overflows, werediscovered in MikMod. Specially-crafted music files in various formatscould, when played, cause an application using the MikMod library to crashor, potentially, execute arbitrary code. (CVE-2009-3995, CVE-2009-3996,CVE-2007-6720)All MikMod users should upgrade to these updated packages, which containbackported patches to correct these issues. All running applications usingthe MikMod library must be restarted for this update to take effect.

Solution(s)

  • redhat-upgrade-mikmod
  • redhat-upgrade-mikmod-devel

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;