This host is installed with MikMod Module Player and is prone to Denial of Service vulnerability.

Successful exploitation will let the attacker crash the application to cause denial-of-service condition. Impact level: Application

Apply Patch, http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=5 filename=31.xm-header.patch att=1 bug=476339

- libmikmod library using a global variable to keep track of the number of channels can be exploited to crash an application using the library by loading a module with more channels than the currently playing module. - Error when processing the header of certain XM files which can be exploited to crash an application using the library via a specially crafted XM file.

MikMod Module Player version 3.1.11 to 3.2.0 on Linux.

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=461519
• http://secunia.com/advisories/33485

---

Updated on 2015-03-25