CVE-2007-6720

Common Vulnerabilities and Exposures

CVE-2007-6720 at MITRE

Details

libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels.

Novell Bugzilla entry: 468760

SUSE Security Advisories:

SUSE-SR:2009:006, published Tue, 10 Mar 2009 15:00:00 +0000
SUSE-SR:2009:006 , published Tue, 10 Mar 2009 15:00:00 +0000

Product(s)	Fixed package version(s)	References
openSUSE 10.3	`libmikmod >= 3.1.11a-34.3` `libmikmod-32bit >= 3.1.11a-34.3` `libmikmod-64bit >= 3.1.11a-34.3` `libmikmod-devel >= 3.1.11a-34.3`	ZYPP Patch Nr: 6033 SAT Patch Nr: 570
openSUSE 11.0	`libmikmod-debuginfo >= 3.1.11a-84.3` `libmikmod-debugsource >= 3.1.11a-84.3`	ZYPP Patch Nr: 6033 SAT Patch Nr: 570
openSUSE 11.0	`libmikmod >= 3.1.11a-84.3` `libmikmod-32bit >= 3.1.11a-84.3` `libmikmod-64bit >= 3.1.11a-84.3` `libmikmod-devel >= 3.1.11a-84.3`	ZYPP Patch Nr: 6033 SAT Patch Nr: 570
openSUSE 11.1	`libmikmod-debuginfo >= 3.1.11a-71.56.1` `libmikmod-debugsource >= 3.1.11a-71.56.1`	ZYPP Patch Nr: 6033 SAT Patch Nr: 570
openSUSE 11.1	`libmikmod >= 3.1.11a-71.56.1` `libmikmod-32bit >= 3.1.11a-71.56.1` `libmikmod-64bit >= 3.1.11a-71.56.1` `libmikmod-devel >= 3.1.11a-71.56.1`	ZYPP Patch Nr: 6033 SAT Patch Nr: 570
SUSE Linux Enterprise Desktop 10 SP2 for x86 SUSE Linux Enterprise Server 10 SP2 for x86	`libmikmod >= 3.1.11-14.7`	sles10-sp2. s390x sles10-sp2. x86-64 sles10-sp2. x86 sled10-sp2. x86 sled10-sp2. x86-64 sles10-sp2. ppc sles10-sp2. ia64 ZYPP Patch Nr: 6034
SUSE Linux Enterprise Server 10 SP2 for IPF	`libmikmod >= 3.1.11-14.7` `libmikmod-x86 >= 3.1.11-14.7`	sles10-sp2. s390x sles10-sp2. x86-64 sles10-sp2. x86 sled10-sp2. x86 sled10-sp2. x86-64 sles10-sp2. ppc sles10-sp2. ia64 ZYPP Patch Nr: 6034
SUSE Linux Enterprise Server 10 SP2 for IBM POWER	`libmikmod >= 3.1.11-14.7` `libmikmod-64bit >= 3.1.11-14.7`	sles10-sp2. s390x sles10-sp2. x86-64 sles10-sp2. x86 sled10-sp2. x86 sled10-sp2. x86-64 sles10-sp2. ppc sles10-sp2. ia64 ZYPP Patch Nr: 6034
SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T SUSE Linux Enterprise Server 10 SP2 for IBM zSeries 64bit	`libmikmod >= 3.1.11-14.7` `libmikmod-32bit >= 3.1.11-14.7`	sles10-sp2. s390x sles10-sp2. x86-64 sles10-sp2. x86 sled10-sp2. x86 sled10-sp2. x86-64 sles10-sp2. ppc sles10-sp2. ia64 ZYPP Patch Nr: 6034
Novell Linux Desktop 9 for x86 Novell Linux POS 9 Open Enterprise Server SUSE CORE 9 for IBM S/390 31bit SUSE CORE 9 for x86	`libmikmod >= 3.1.10-662.5`	sles9-nlpos. x86 core9. ppc sles9-nld. x86 core9. x86 core9. ia64 core9. s390x core9. s390 core9. x86-64 sles9-oes. x86 sles9-nld. x86-64 YOU Patch Nr: 12359
SUSE CORE 9 for Itanium Processor Family	`libmikmod >= 3.1.10-662.5` `libmikmod-x86 >= 9-200902271558`	sles9-nlpos. x86 core9. ppc sles9-nld. x86 core9. x86 core9. ia64 core9. s390x core9. s390 core9. x86-64 sles9-oes. x86 sles9-nld. x86-64 YOU Patch Nr: 12359
SUSE CORE 9 for IBM POWER	`libmikmod >= 3.1.10-662.5` `libmikmod-64bit >= 9-200902280719`	sles9-nlpos. x86 core9. ppc sles9-nld. x86 core9. x86 core9. ia64 core9. s390x core9. s390 core9. x86-64 sles9-oes. x86 sles9-nld. x86-64 YOU Patch Nr: 12359
SUSE CORE 9 for IBM zSeries 64bit	`libmikmod >= 3.1.10-662.5` `libmikmod-32bit >= 9-200902271552`	sles9-nlpos. x86 core9. ppc sles9-nld. x86 core9. x86 core9. ia64 core9. s390x core9. s390 core9. x86-64 sles9-oes. x86 sles9-nld. x86-64 YOU Patch Nr: 12359
Novell Linux Desktop 9 for x86_64 SUSE CORE 9 for AMD64 and Intel EM64T	`libmikmod >= 3.1.10-662.5` `libmikmod-32bit >= 9-200902271558`	sles9-nlpos. x86 core9. ppc sles9-nld. x86 core9. x86 core9. ia64 core9. s390x core9. s390 core9. x86-64 sles9-oes. x86 sles9-nld. x86-64 YOU Patch Nr: 12359