CVE-2018-10017
Medium
Description
soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service (out-of-bounds read) via an IT or MO3 file with many nested pattern loops.
SeverityMedium
CVSS6.5
Exploit probability—
ProductLibopenmpt
PublishedApr 11, 2018
First seenApr 11, 2018
How to fix
Update
- openmpt libopenmpt0.3.8 or later
- openmpt openmpt1.27.07.00 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openmpt libopenmpt | v < 0.3.8 | 0.3.8 |
| openmpt openmpt | v < 1.27.07.00 | 1.27.07.00 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.