CVE-2009-1513
Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows...
Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name.
- Record
CVE-2009-1513- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name.
- Record
CVE-2009-1513- Updated
- 2026-11-02
EUVDEUVD-2009-1510 No score
Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name.
- Record
EUVD-2009-1510- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h3rv-m7w5-j5w5 No score
Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows...
Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name.
- Record
GHSA-h3rv-m7w5-j5w5- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name.
- Record
CVE-2009-1513- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-1513 No score
Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name.
- Record
DEBIAN-CVE-2009-1513- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libmodplugDebian:12 |
before 1:0.8.7-1 | 1:0.8.7-1 |
libmodplugDebian:13 |
before 1:0.8.7-1 | 1:0.8.7-1 |
libmodplugDebian:14 |
before 1:0.8.7-1 | 1:0.8.7-1 |
libmodplugDebian:4.0 From an advisory covering 2 CVEs |
before 1:0.7-5.2+etch1, plus listed versions 1:0.7-5.2 |
1:0.7-5.2+etch1 |
libmodplugDebian:5.0 From an advisory covering 2 CVEs |
before 1:0.8.4-1+lenny1, plus listed versions 1:0.8.4-1 |
1:0.8.4-1+lenny1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-1513 is a medium vulnerability (CVSS 6.8) in Konstanty Bialkowski Libmodplug, published May 4, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.11%, the 90th percentile. Fixed in libmodplug 1:0.8.7-1.
References
ubuntu.com/usn/USN-771-1
secunia.com/advisories/35736
debian.org/security/2009/dsa-1850
securityfocus.com/bid/34747
modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_pat.cpp?r1=1.3&r2=1.4
Show 15 moreShow less
sourceforge.net/tracker?func=detail&aid=2777467&group_id=1275&atid=301275
mandriva.com/security/advisories?name=MDVSA-2009:128
osvdb.org/54109
openwall.com/lists/oss-security/2009/04/29/5
bugs.debian.org/cgi-bin/bugreport.cgi?bug=526084
security.gentoo.org/glsa/glsa-200907-07.xml
modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms%3Ba=commitdiff%3Bh=c4ebb701be6ee9a296a44fdac5a20b7739ff0595
vupen.com/english/advisories/2009/1200
nvd.nist.gov/vuln/detail/CVE-2009-1513
github.com/advisories/GHSA-h3rv-m7w5-j5w5
security-tracker.debian.org/tracker/CVE-2009-1513