Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2010-2971
HistoryAug 05, 2010 - 1:22 p.m.

CVE-2010-2971

2010-08-0513:22:29
CWE-119
mitre
web.nvd.nist.gov
37
libmikmod
loaders
load_it.c
buffer over-read
cve-2010-2971
remote attackers
unspecified impact
impulse tracker file
cve-2010-2546

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.219

Percentile

96.5%

JSON

loaders/load_it.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of name##env relative to name##tick and name##node, which allows remote attackers to trigger a buffer over-read and possibly have unspecified other impact via a crafted Impulse Tracker file, a related issue to CVE-2010-2546. NOTE: this issue exists because of an incomplete fix for CVE-2009-3995.

Affected configurations

Nvd
Node
raphael_assenatlibmikmodMatch3.1.12
VendorProductVersionCPE
raphael_assenatlibmikmod3.1.12cpe:2.3:a:raphael_assenat:libmikmod:3.1.12:*:*:*:*:*:*:*

Related

nessus 18
osv 2
ubuntucve 4
nvd 3
openvas 25
cvelist 3
prion 3
debiancve 3
gentoo 1
ubuntu 1
securityvulns 6
cve 2
debian 2
veracode 2
fedora 2
centos 1
oraclelinux 1
seebug 1
redhat 1
altlinux 1
nessus
nessus
Debian DSA-2081-1 : libmikmod - buffer overflow
2010-08-03 00:00:00
GLSA-201203-10 : libmikmod: User-assisted execution of arbitrary code
2012-03-06 00:00:00
Mandriva Linux Security Advisory : libmikmod (MDVSA-2010:151)
2010-08-17 00:00:00
osv
osv
libmikmod - arbitrary code execution
2010-08-01 00:00:00
timidity-2.15.0-2.2 on GA media
2024-06-15 00:00:00
ubuntucve
ubuntucve
CVE-2010-2971
2010-08-05 00:00:00
CVE-2010-2546
2010-08-05 00:00:00
CVE-2009-3995
2009-12-18 00:00:00
nvd
nvd
CVE-2010-2971
2010-08-05 13:22:29
CVE-2010-2546
2010-08-05 13:22:29
CVE-2009-3995
2009-12-18 18:30:00
openvas
openvas
Debian: Security Advisory (DSA-2081-1)
2010-08-21 00:00:00
Gentoo Security Advisory GLSA 201203-10 (libmikmod)
2012-03-12 00:00:00
Gentoo Security Advisory GLSA 201203-10 (libmikmod)
2012-03-12 00:00:00
cvelist
cvelist
CVE-2010-2971
2010-08-04 21:00:00
CVE-2010-2546
2010-08-04 21:00:00
CVE-2009-3995
2009-12-18 18:00:00
prion
prion
Design/Logic Flaw
2010-08-05 13:22:00
Heap overflow
2010-08-05 13:22:00
Heap overflow
2009-12-18 18:30:00
debiancve
debiancve
CVE-2010-2971
2010-08-05 13:22:29
CVE-2010-2546
2010-08-05 13:22:29
CVE-2009-3995
2009-12-18 18:30:00
gentoo
gentoo
libmikmod: User-assisted execution of arbitrary code
2012-03-06 00:00:00
ubuntu
ubuntu
libMikMod vulnerabilities
2010-09-29 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2081-1] New libmikmod packages fix arbitrary code execution
2010-08-14 00:00:00
libmikmod multiple buffer overflows
2010-08-14 00:00:00
Secunia Research: Winamp Impulse Tracker Sample Parsing Buffer Overflow
2009-12-17 00:00:00
cve
cve
CVE-2010-2546
2010-08-05 13:22:29
CVE-2009-3995
2009-12-18 18:30:00
debian
debian
[SECURITY] [DSA 2081-1] New libmikmod packages fix arbitrary code execution
2010-08-01 19:11:02
[SECURITY] [DSA 2071-1] New libmikmod packages fix several vulnerabilities
2010-07-14 20:14:07
veracode
veracode
Buffer Overflow
2023-12-28 10:50:52
Buffer Overflow
2023-12-28 11:41:06
fedora
fedora
[SECURITY] Fedora 14 Update: libmikmod-3.2.0-11.beta2.fc14
2010-09-08 04:36:46
[SECURITY] Fedora 13 Update: libmikmod-3.2.0-11.beta2.fc13
2010-09-09 01:12:11
centos
centos
mikmod security update
2010-09-29 09:47:44
oraclelinux
oraclelinux
mikmod security update
2010-09-28 00:00:00
seebug
seebug
Winampζ¨‘ε—θ§£η ε™¨ζ’δ»Άε€šδΈͺηΌ“ε†²εŒΊζΊ’ε‡ΊζΌζ΄ž
2009-12-18 00:00:00
redhat
redhat
(RHSA-2010:0720) Moderate: mikmod security update
2010-09-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package libmikmod version 3.1.11-alt0.8
2010-08-26 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.219

Percentile

96.5%

JSON
Related for CVE-2010-2971
nessus18osv2ubuntucve4nvd3openvas25cvelist3prion3debiancve3gentoo1ubuntu1securityvulns6cve2debian2veracode2fedora2centos1oraclelinux1seebug1redhat1altlinux1