NetSight
IP …
medium4.3

CVE-2007-6720

libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the …

Impact

libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels.

Affected products

VendorProductAffected versions
Igno SaitzLibmikmod
Versions 3.1.9-1, 3.1.9-2, 3.1.9-3, 3.1.9-4, 3.1.9-5, 3.1.9-6

References