CVE-2011-1574
NoneCVSS
—
EPSS
42.9%
Published
May 9, 2011
CISA due date
—
The record
Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | libmodplug | 0 | 1:0.8.8.2-1 |
| Debian:11 | libmodplug | 0 | 1:0.8.8.2-1 |
| Debian:12 | libmodplug | 0 | 1:0.8.8.2-1 |
| Debian:13 | libmodplug | 0 | 1:0.8.8.2-1 |
| Debian:5.0 | libmodplug | 0 | 1:0.8.4-1+lenny2 |
| Debian:6.0 | libmodplug | 0 | 1:0.8.8.1-1+squeeze1 |
| Red Hat:enterprise_linux:4::as | gstreamer-plugins | 0 | 0:0.8.5-1.EL.3 |
| Red Hat:enterprise_linux:4::as | gstreamer-plugins-debuginfo | 0 | 0:0.8.5-1.EL.3 |
| Red Hat:enterprise_linux:4::as | gstreamer-plugins-devel | 0 | 0:0.8.5-1.EL.3 |
| Red Hat:enterprise_linux:4::desktop | gstreamer-plugins | 0 | 0:0.8.5-1.EL.3 |
| Red Hat:enterprise_linux:4::desktop | gstreamer-plugins-debuginfo | 0 | 0:0.8.5-1.EL.3 |
| Red Hat:enterprise_linux:4::desktop | gstreamer-plugins-devel | 0 | 0:0.8.5-1.EL.3 |
| Red Hat:enterprise_linux:4::es | gstreamer-plugins | 0 | 0:0.8.5-1.EL.3 |
| Red Hat:enterprise_linux:4::es | gstreamer-plugins-debuginfo | 0 | 0:0.8.5-1.EL.3 |
| Red Hat:enterprise_linux:4::es | gstreamer-plugins-devel | 0 | 0:0.8.5-1.EL.3 |
| Red Hat:enterprise_linux:4::ws | gstreamer-plugins | 0 | 0:0.8.5-1.EL.3 |
| Red Hat:enterprise_linux:4::ws | gstreamer-plugins-debuginfo | 0 | 0:0.8.5-1.EL.3 |
| Red Hat:enterprise_linux:4::ws | gstreamer-plugins-devel | 0 | 0:0.8.5-1.EL.3 |
Related vulnerabilities
- CVE-2011-1761 Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro… Also affects libmodplug
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119
- CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dc… CWE-119
- CVE-2026-90831 A vulnerability was detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90804 A vulnerability was detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90803 A security vulnerability has been detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90801 A security flaw has been discovered in GNU Binutils 2.47. CWE-119
- CVE-2026-87933 A vulnerability was found in DaveGamble cJSON up to 1.7.19. CWE-119