Gentoo: 200608-14 Normal: DUMB Heap Overflow Risk of Code Execution

Gentoo Linux Security Advisory GLSA 200608-14 https://security.gentoo.org/ Severity: Normal Title: DUMB: Heap buffer overflow Date: August 08, 2006 Bugs: #142387 ID: 200608-14

Synopsis ======= A heap-based buffer overflow in DUMB could result in the execution of arbitrary code.
Background ========= DUMB (Dynamic Universal Music Bibliotheque) is an IT, XM, S3M and MOD player library.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-libs/dumb < 0.9.3-r1 >= 0.9.3-r1
========== Luigi Auriemma found a heap-based buffer overflow in the it_read_envelope function which reads the envelope values for volume, pan and pitch of the instruments referenced in a ".it" ...