Total vulnerabilities in the database
libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels.
| Software | From | Fixed in |
|---|---|---|
| igno_saitz / libmikmod | 3.1.10-2 | 3.1.10-2.x |
| igno_saitz / libmikmod | 3.1.10-4 | 3.1.10-4.x |
| igno_saitz / libmikmod | 3.1.9-6 | 3.1.9-6.x |
| igno_saitz / libmikmod | 3.1.9-4 | 3.1.9-4.x |
| igno_saitz / libmikmod | 3.2.0 | 3.2.0.x |
| igno_saitz / libmikmod | 3.1.9-1 | 3.1.9-1.x |
| igno_saitz / libmikmod | 3.1.11-4 | 3.1.11-4.x |
| igno_saitz / libmikmod | 3.1.9-2 | 3.1.9-2.x |
| igno_saitz / libmikmod | 3.1.11-3 | 3.1.11-3.x |
| igno_saitz / libmikmod | 3.1.10-3 | 3.1.10-3.x |
| igno_saitz / libmikmod | 3.1.9-3 | 3.1.9-3.x |
| igno_saitz / libmikmod | 3.1.11-1 | 3.1.11-1.x |
| igno_saitz / libmikmod | 3.1.10-1 | 3.1.10-1.x |
| igno_saitz / libmikmod | 3.1.11-6 | 3.1.11-6.x |
| igno_saitz / libmikmod | 3.1.9-5 | 3.1.9-5.x |
| igno_saitz / libmikmod | 3.1.11-2 | 3.1.11-2.x |
| igno_saitz / libmikmod | 3.1.10-5 | 3.1.10-5.x |
| igno_saitz / libmikmod | 3.1.11-5 | 3.1.11-5.x |
| igno_saitz / libmikmod | 3.1.12 | 3.1.12.x |