ID CVE-2018-11710
Summary soundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted AMS file because of an invalid write near address 0 in an out-of-memory situation.
References
Vulnerable Configurations
  • cpe:2.3:a:openmpt:libopenmpt:0.2.3532:beta1:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.3532:beta1:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.3566:beta2:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.3566:beta2:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.3746:beta3:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.3746:beta3:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.3773:beta4:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.3773:beta4:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.4115:beta5:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.4115:beta5:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.4238:beta6:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.4238:beta6:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.4259:beta7:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.4259:beta7:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.4664:beta8:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.4664:beta8:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.4667:beta9:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.4667:beta9:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.4764:beta10:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.4764:beta10:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.4943:beta11:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.4943:beta11:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.4954:beta12:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.4954:beta12:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.5486:beta13:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.5486:beta13:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.5602:beta14:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.5602:beta14:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.5705:beta15:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.5705:beta15:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.5787:beta16:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.5787:beta16:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.6401:beta17:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.6401:beta17:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.6611:beta18:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.6611:beta18:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.6664:beta19:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.6664:beta19:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.6774:beta20:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.6774:beta20:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.7025:beta20.1:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.7025:beta20.1:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.7299:beta20.2:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.7299:beta20.2:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.7386:beta20.3:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.7386:beta20.3:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.7559:beta20.4:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.7559:beta20.4:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.7561:beta20.5:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.7561:beta20.5:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.7774:beta22:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.7774:beta22:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.8043:beta23:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.8043:beta23:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.8190:beta24:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.8190:beta24:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.8414:beta25:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.8414:beta25:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.8461:beta26:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.8461:beta26:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.8760:beta27:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.8760:beta27:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.9227:beta28:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.9227:beta28:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.9913:beta30:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.9913:beta30:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.10049:beta31:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.10049:beta31:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.10172:beta32:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.10172:beta32:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.10495:beta33:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.10495:beta33:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.10635:beta34:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.10635:beta34:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.10859:beta35:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.10859:beta35:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.10933:beta36:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.10933:beta36:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.11253:beta37:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.11253:beta37:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.11539:beta38:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.11539:beta38:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.2.95422:beta29:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.2.95422:beta29:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.3.0:-:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.3.0:-:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.3.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.3.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.3.4:*:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.3.4:*:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.3.5:*:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.3.5:*:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.3.6:*:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.3.6:*:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.3.7:*:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.3.7:*:*:*:*:*:*:*
  • cpe:2.3:a:openmpt:libopenmpt:0.3.8:*:*:*:*:*:*:*
    cpe:2.3:a:openmpt:libopenmpt:0.3.8:*:*:*:*:*:*:*
CVSS
Base: 6.8 (as of 16-07-2018 - 12:06)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:P
refmap via4
confirm
Last major update 16-07-2018 - 12:06
Published 04-06-2018 - 13:29
Last modified 16-07-2018 - 12:06
Back to Top