CVE-2006-3879

Integer overflow in the loadChunk function in loaders/load_gt2.c in libmikmod in Mikmod Sound System 3.2.2 allows remote attackers to cause a denial of service via a GRAOUMF TRACKER (GT2) module file with a large (0xffffffff) comment length value in an XCOM chunk.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

9.46% chance of exploitation in the next 30 days, 95th percentile

Published

2006-07-27

Updated

2024-08-07

Proof-of-concept exploits (2)

• http://aluigi.altervista.org/adv/lmmgt2ho-adv.txt
• http://aluigi.org/poc/lmmgt2ho.zip

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/2073

References

• CVE Record
• NVD entry

Related

• CVE-2006-3852
• CVE-2006-3880
• CVE-2006-3851
• CVE-2006-3883
• CVE-2006-3850
• CVE-2006-3884