CVE-2009-1438
Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8...
Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted (1) song comment or (2) song name, which triggers a heap-based buffer overflow, as exploited in the wild in August 2008.
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted (1) song comment or (2) song name, which triggers a heap-based buffer overflow, as exploited in the wild in August 2008.
- Record
CVE-2009-1438- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted (1) song comment or (2) song name, which triggers a heap-based buffer overflow, as exploited in the wild in August 2008.
- Record
CVE-2009-1438- Updated
- 2026-11-02
EUVDEUVD-2009-1436 No score
Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted (1) song comment or (2) song name, which triggers a heap-based buffer overflow, as exploited in the wild in August 2008.
- Record
EUVD-2009-1436- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v7cc-2p5c-5943 No score
Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8...
Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted (1) song comment or (2) song name, which triggers a heap-based buffer overflow, as exploited in the wild in August 2008.
- Record
GHSA-v7cc-2p5c-5943- Updated
- 2026-11-02
OSV No score
Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted (1) song comment or (2) song name, which triggers a heap-based buffer overflow, as exploited in the wild in August 2008.
- Record
CVE-2009-1438- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-1438 No score
Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted (1) song comment or (2) song name, which triggers a heap-based buffer overflow, as exploited in the wild in August 2008.
- Record
DEBIAN-CVE-2009-1438- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libmodplugDebian:12 |
before 1:0.8.7-1 | 1:0.8.7-1 |
libmodplugDebian:13 |
before 1:0.8.7-1 | 1:0.8.7-1 |
libmodplugDebian:14 |
before 1:0.8.7-1 | 1:0.8.7-1 |
libmodplugDebian:4.0 From an advisory covering 2 CVEs |
before 1:0.7-5.2+etch1, plus listed versions 1:0.7-5.2 |
1:0.7-5.2+etch1 |
libmodplugDebian:5.0 From an advisory covering 2 CVEs |
before 1:0.8.4-1+lenny1, plus listed versions 1:0.8.4-1 |
1:0.8.4-1+lenny1 |
gst-plugins-bad0.10Debian:4.0 |
before 0.10.3-3.1+etch3, plus listed versions 0.10.3-3.10.10.3-3.1+etch1 |
0.10.3-3.1+etch3 |
gst-plugins-bad0.10Debian:5.0 |
before 0.10.7-2+lenny2, plus listed versions 0.10.7-2 |
0.10.7-2+lenny2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-1438 is a high vulnerability (CVSS 7.5) in Konstanty Bialkowski Libmodplug, published April 27, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.67%, the 91st percentile. Fixed in libmodplug 1:0.8.7-1.
References
osvdb.org/53801
ubuntu.com/usn/USN-771-1
modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_med.cpp?r1=1.1&%3Br2=1.2
secunia.com/advisories/34797
Show 22 moreShow less
debian.org/security/2009/dsa-1850
bugzilla.redhat.com/show_bug.cgi?id=496834
bugs.gentoo.org/show_bug.cgi?id=266913
securityfocus.com/bid/30801
mandriva.com/security/advisories?name=MDVSA-2009:128
exchange.xforce.ibmcloud.com/vulnerabilities/50388
sourceforge.net/project/shownotes.php?release_id=677065&group_id=1275
security.gentoo.org/glsa/glsa-200907-07.xml
redhat.com/archives/fedora-package-announce/2009-April/msg00908.html
vupen.com/english/advisories/2009/1104
lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
openwall.com/lists/oss-security/2009/04/21/4
nvd.nist.gov/vuln/detail/CVE-2009-1438
github.com/advisories/GHSA-v7cc-2p5c-5943
security-tracker.debian.org/tracker/CVE-2009-1438