CVE-2013-4233

Integer overflow in the abc_set_parts function in load_abc.cpp in
libmodplug 0.8.8.4 and earlier allows remote attackers to cause a denial of
service and possibly execute arbitrary code via a crafted P header in an
ABC file, which triggers a heap-based buffer overflow.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=719462&gt;