CVEs-PoC/2006/CVE-2006-3879.md

CVE-2006-3879

Description

Integer overflow in the loadChunk function in loaders/load_gt2.c in libmikmod in Mikmod Sound System 3.2.2 allows remote attackers to cause a denial of service via a GRAOUMF TRACKER (GT2) module file with a large (0xffffffff) comment length value in an XCOM chunk.

POC

Reference

• http://aluigi.altervista.org/adv/lmmgt2ho-adv.txt
• http://aluigi.org/poc/lmmgt2ho.zip
• http://securityreason.com/securityalert/1288

Github

• https://github.com/ARPSyndicate/cve-scores