Advisories MDVSA-2010:151: libmikmod

[paul 9]

A vulnerability has been discovered and corrected in libmikmod:

 

Multiple heap-based buffer overflows might allow remote attackers

to execute arbitrary code via (1) crafted samples or (2) crafted

instrument definitions in an Impulse Tracker file (CVE-2009-3995).

 

Packages for 2008.0 and 2009.0 are provided as of the Extended

Maintenance Program. Please visit this link to learn more:

http://store.mandriva.com/product_info.php?cPath=149&products_id=490

 

The updated packages have been patched to correct this issue.