libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0720 advisory.

    [3.1.6-39.el5_5.1]
    - fix CVE-2007-6720, CVE-2009-3995,3996 (#617486)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple input validation flaws, resulting in buffer overflows, were discovered in MikMod. Specially crafted music files in various formats could, when played, cause an application using the MikMod library to crash or, potentially, execute arbitrary code. (CVE-2009-3995, CVE-2009-3996, CVE-2007-6720)

All running applications using the MikMod library must be restarted for this update to take effect.

It was discovered that libMikMod incorrectly handled songs with different channel counts. If a user were tricked into opening a crafted song file, an attacker could cause a denial of service.
(CVE-2007-6720)

It was discovered that libMikMod incorrectly handled certain malformed XM files. If a user were tricked into opening a crafted XM file, an attacker could cause a denial of service. (CVE-2009-0179)

It was discovered that libMikMod incorrectly handled certain malformed Impulse Tracker files. If a user were tricked into opening a crafted Impulse Tracker file, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. (CVE-2009-3995, CVE-2010-2546, CVE-2010-2971)

It was discovered that libMikMod incorrectly handled certain malformed Ultratracker files. If a user were tricked into opening a crafted Ultratracker file, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. (CVE-2009-3996).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated mikmod packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

MikMod is a MOD music file player for Linux, UNIX, and similar operating systems. It supports various file formats including MOD, STM, S3M, MTM, XM, ULT, and IT.

Multiple input validation flaws, resulting in buffer overflows, were discovered in MikMod. Specially crafted music files in various formats could, when played, cause an application using the MikMod library to crash or, potentially, execute arbitrary code. (CVE-2009-3995, CVE-2009-3996, CVE-2007-6720)

All MikMod users should upgrade to these updated packages, which contain backported patches to correct these issues. All running applications using the MikMod library must be restarted for this update to take effect.

Multiple vulnerabilities has been found and corrected in libmikmod :

libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels (CVE-2007-6720).

libmikmod 3.1.11 through 3.2.0, as used by MikMod and possibly other products, allows user-assisted attackers to cause a denial of service (application crash) by loading an XM file (CVE-2009-0179).

This update fixes these vulnerabilities.

Update :

Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers

Specially crafted XM files or playing mod files with varying number of channels could crash applications using libmikmod. (CVE-2009-0179 / CVE-2007-6720)

Specially crafted XM files or playing mod files with varying number of channels could crash applications using libmikmod. (CVE-2009-0179, CVE-2007-6720)

- Fri Aug 28 2009 Jindrich Novy <jnovy at redhat.com>     3.2.0-5.beta2

    - fix CVE-2007-6720 (#479829)

    - fix CVE-2009-0179 (#479833)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Fri Aug 28 2009 Jindrich Novy <jnovy at redhat.com>     3.2.0-4.beta2

    - fix CVE-2007-6720 (#479829)

    - fix CVE-2009-0179 (#479833)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Specially crafted XM files or playing mod files with varying number of channels could crash applications using libmikmod (CVE-2009-0179, CVE-2007-6720).

ID	Name	Product	Family	Severity
68105	Oracle Linux 5 : mikmod (ELSA-2010-0720)	Nessus	Oracle Linux Local Security Checks	high
60860	Scientific Linux Security Update : mikmod on SL3.x, SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	high
49764	Ubuntu 8.04 LTS / 9.04 / 9.10 : libmikmod vulnerabilities (USN-995-1)	Nessus	Ubuntu Local Security Checks	high
49745	RHEL 3 / 4 / 5 : mikmod (RHSA-2010:0720)	Nessus	Red Hat Local Security Checks	high
49714	CentOS 3 / 4 / 5 : mikmod (CESA-2010:0720)	Nessus	CentOS Local Security Checks	high
42097	Mandriva Linux Security Advisory : libmikmod (MDVSA-2009:272-1)	Nessus	Mandriva Local Security Checks	medium
41545	SuSE 10 Security Update : libmikmod (ZYPP Patch Number 6034)	Nessus	SuSE Local Security Checks	medium
41282	SuSE9 Security Update : libmikmod (YOU Patch Number 12359)	Nessus	SuSE Local Security Checks	medium
40810	Fedora 11 : libmikmod-3.2.0-5.beta2.fc11 (2009-9112)	Nessus	Fedora Local Security Checks	medium
40809	Fedora 10 : libmikmod-3.2.0-4.beta2.fc10 (2009-9095)	Nessus	Fedora Local Security Checks	medium
40257	openSUSE Security Update : libmikmod (libmikmod-570)	Nessus	SuSE Local Security Checks	medium
40025	openSUSE Security Update : libmikmod (libmikmod-570)	Nessus	SuSE Local Security Checks	medium
35759	openSUSE 10 Security Update : libmikmod (libmikmod-6033)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2007-6720

high

Tenable Plugins

high

high

high

high

high

medium

medium

medium

medium

medium

medium

medium

medium