CVE-2011-2911
Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8...
CVE-2011-2911 is a medium vulnerability (CVSS 6.8) in Konstanty Bialkowski Libmodplug, published February 21, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.30%, the 91st percentile. Fixed in libmodplug 1:0.8.8.4-1.
Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.
- Record
CVE-2011-2911- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.
- Record
CVE-2011-2911- Updated
- 2026-11-02
EUVDEUVD-2011-2884 No score
Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.
- Record
EUVD-2011-2884- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c5vv-mhrm-6wxg No score
Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8...
Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.
- Record
GHSA-c5vv-mhrm-6wxg- Updated
- 2026-11-02
OSV No score
Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.
- Record
CVE-2011-2911- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-2911 No score
Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.
- Record
DEBIAN-CVE-2011-2911- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libmodplugDebian:12 |
before 1:0.8.8.4-1 | 1:0.8.8.4-1 |
libmodplugDebian:13 |
before 1:0.8.8.4-1 | 1:0.8.8.4-1 |
libmodplugDebian:14 |
before 1:0.8.8.4-1 | 1:0.8.8.4-1 |
libmodplugDebian:6.0 |
before 1:0.8.8.1-1+squeeze2, plus listed versions 1:0.8.8.1-11:0.8.8.1-1+squeeze1 |
1:0.8.8.1-1+squeeze2 |
gstreamer-pluginsRed Hat:enterprise_linux:4::as |
before 0:0.8.5-1.EL.4 | 0:0.8.5-1.EL.4 |
gstreamer-plugins-debuginfoRed Hat:enterprise_linux:4::as |
before 0:0.8.5-1.EL.4 | 0:0.8.5-1.EL.4 |
gstreamer-plugins-develRed Hat:enterprise_linux:4::as |
before 0:0.8.5-1.EL.4 | 0:0.8.5-1.EL.4 |
gstreamer-pluginsRed Hat:enterprise_linux:4::desktop |
before 0:0.8.5-1.EL.4 | 0:0.8.5-1.EL.4 |
gstreamer-plugins-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:0.8.5-1.EL.4 | 0:0.8.5-1.EL.4 |
gstreamer-plugins-develRed Hat:enterprise_linux:4::desktop |
before 0:0.8.5-1.EL.4 | 0:0.8.5-1.EL.4 |
Show 6 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gstreamer-pluginsRed Hat:enterprise_linux:4::es |
before 0:0.8.5-1.EL.4 | 0:0.8.5-1.EL.4 |
gstreamer-plugins-debuginfoRed Hat:enterprise_linux:4::es |
before 0:0.8.5-1.EL.4 | 0:0.8.5-1.EL.4 |
gstreamer-plugins-develRed Hat:enterprise_linux:4::es |
before 0:0.8.5-1.EL.4 | 0:0.8.5-1.EL.4 |
gstreamer-pluginsRed Hat:enterprise_linux:4::ws |
before 0:0.8.5-1.EL.4 | 0:0.8.5-1.EL.4 |
gstreamer-plugins-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:0.8.5-1.EL.4 | 0:0.8.5-1.EL.4 |
gstreamer-plugins-develRed Hat:enterprise_linux:4::ws |
before 0:0.8.5-1.EL.4 | 0:0.8.5-1.EL.4 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
lists.fedoraproject.org/pipermail/package-announce/2011-September/066044.html
openwall.com/lists/oss-security/2011/08/10/4
debian.org/security/2012/dsa-2415
sourceforge.net/projects/modplug-xmms/files/libmodplug/0.8.8.4
gentoo.org/security/en/glsa/glsa-201203-16.xml
Show 42 moreShow less
secunia.com/advisories/45131
osvdb.org/74208
ubuntu.com/usn/usn-1255-1
lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html
securityfocus.com/bid/48979
modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms%3Ba=commitdiff%3Bh=2d4c56de314ab13e4437bd8b609f0b751066eee8
rhn.redhat.com/errata/RHSA-2011-1264.html
exchange.xforce.ibmcloud.com/vulnerabilities/68983
jira.atheme.org/browse/AUDPLUG-394
nvd.nist.gov/vuln/detail/CVE-2011-2911
github.com/advisories/GHSA-c5vv-mhrm-6wxg
security-tracker.debian.org/tracker/CVE-2011-2911
access.redhat.com/errata/RHSA-2011:1264
bugzilla.redhat.com/show_bug.cgi?id=728371
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1264.json
cve.org/CVERecord?id=CVE-2011-2911