CVE-2007-6720
Description
libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels.
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| igno_saitz libmikmod | 3.1.9-1, 3.1.9-2, 3.1.9-3, 3.1.9-4, 3.1.9-5, 3.1.9-6, 3.1.10-1, 3.1.10-2, 3.1.10-3, 3.1.10-4, 3.1.10-5, 3.1.11-1, 3.1.11-2, 3.1.11-3, 3.1.11-4, 3.1.11-5, 3.1.11-6, 3.1.12, 3.2.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.