CVE-2006-4192
Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8...
Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.
- Record
CVE-2006-4192- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.
- Record
CVE-2006-4192- Updated
- 2026-11-02
EUVDEUVD-2006-4182 No score
Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.
- Record
EUVD-2006-4182- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-whr7-mq2r-hhmm No score
Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8...
Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.
- Record
GHSA-whr7-mq2r-hhmm- Updated
- 2026-11-02
OSV No score
Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.
- Record
CVE-2006-4192- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-4192 No score
Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.
- Record
DEBIAN-CVE-2006-4192- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libmodplugDebian:12 |
before 1:0.7-5.2 | 1:0.7-5.2 |
libmodplugDebian:13 |
before 1:0.7-5.2 | 1:0.7-5.2 |
libmodplugDebian:14 |
before 1:0.7-5.2 | 1:0.7-5.2 |
gstreamer-pluginsRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:0.8.5-1.EL.3 | 0:0.8.5-1.EL.3 |
gstreamer-plugins-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:0.8.5-1.EL.3 | 0:0.8.5-1.EL.3 |
gstreamer-plugins-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:0.8.5-1.EL.3 | 0:0.8.5-1.EL.3 |
gstreamer-pluginsRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:0.8.5-1.EL.3 | 0:0.8.5-1.EL.3 |
gstreamer-plugins-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:0.8.5-1.EL.3 | 0:0.8.5-1.EL.3 |
gstreamer-plugins-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:0.8.5-1.EL.3 | 0:0.8.5-1.EL.3 |
gstreamer-pluginsRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:0.8.5-1.EL.3 | 0:0.8.5-1.EL.3 |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gstreamer-plugins-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:0.8.5-1.EL.3 | 0:0.8.5-1.EL.3 |
gstreamer-plugins-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:0.8.5-1.EL.3 | 0:0.8.5-1.EL.3 |
gstreamer-pluginsRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:0.8.5-1.EL.3 | 0:0.8.5-1.EL.3 |
gstreamer-plugins-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:0.8.5-1.EL.3 | 0:0.8.5-1.EL.3 |
gstreamer-plugins-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:0.8.5-1.EL.3 | 0:0.8.5-1.EL.3 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | OpenMPT 1.17.02.43 - Multiple Remote Buffer Overflows (PoC) | 2006-08-10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4192 is a medium vulnerability (CVSS 5.1) in Modplug Tracker, published August 17, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 9.00%, the 95th percentile. Fixed in libmodplug 1:0.7-5.2.
References
secunia.com/advisories/21418
exchange.xforce.ibmcloud.com/vulnerabilities/28309
security.gentoo.org/glsa/glsa-200612-04.xml
securityfocus.com/bid/19448
ubuntu.com/usn/usn-521-1
novell.com/linux/security/advisories/2006_23_sr.html
Show 27 moreShow less
aluigi.altervista.org/adv/mptho-adv.txt
vupen.com/english/advisories/2006/4310
cgit.freedesktop.org/gstreamer/gst-plugins-bad/commit?id=bc2cdd57d549ab3ba59782e9b395d0cd683fd3ac
mandriva.com/security/advisories?name=MDKSA-2007:001
securityreason.com/securityalert/1397
rhn.redhat.com/errata/RHSA-2011-0477.html
bugzilla.redhat.com/show_bug.cgi?id=497154
nvd.nist.gov/vuln/detail/CVE-2006-4192
github.com/advisories/GHSA-whr7-mq2r-hhmm
security-tracker.debian.org/tracker/CVE-2006-4192
access.redhat.com/errata/RHSA-2011:0477
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0477.json
cve.org/CVERecord?id=CVE-2006-4192