Every CVE Search/ Get API key

CVE-2006-4192

Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8...

5.1 MediumPublic exploitFix available

CVE-2006-4192 is a medium vulnerability (CVSS 5.1) in Modplug Tracker, published August 17, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 9.00%, the 95th percentile. Fixed in libmodplug 1:0.7-5.2.

Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.

Exploit likelihood

9.00%Down 35.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.1

Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.

Record
CVE-2006-4192
CVSS 2.0
5.1 MediumAV:N/AC:H/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.

Record
CVE-2006-4192
Updated
2026-11-02
EUVDEUVD-2006-4182 No score

Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.

Record
EUVD-2006-4182
Updated
2026-11-03
GitHub AdvisoriesGHSA-whr7-mq2r-hhmm No score

Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8...

Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.

Record
GHSA-whr7-mq2r-hhmm
Updated
2026-11-02
OSV No score

Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.

Record
CVE-2006-4192
Updated
2026-11-02
OSVDEBIAN-CVE-2006-4192 No score

Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.

Record
DEBIAN-CVE-2006-4192
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libmodplug
Debian:12
 before 1:0.7-5.2
1:0.7-5.2
libmodplug
Debian:13
 before 1:0.7-5.2
1:0.7-5.2
libmodplug
Debian:14
 before 1:0.7-5.2
1:0.7-5.2
gstreamer-plugins
Red Hat:enterprise_linux:4::as
 before 0:0.8.5-1.EL.3
0:0.8.5-1.EL.3
gstreamer-plugins-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:0.8.5-1.EL.3
0:0.8.5-1.EL.3
gstreamer-plugins-devel
Red Hat:enterprise_linux:4::as
 before 0:0.8.5-1.EL.3
0:0.8.5-1.EL.3
gstreamer-plugins
Red Hat:enterprise_linux:4::desktop
 before 0:0.8.5-1.EL.3
0:0.8.5-1.EL.3
gstreamer-plugins-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:0.8.5-1.EL.3
0:0.8.5-1.EL.3
gstreamer-plugins-devel
Red Hat:enterprise_linux:4::desktop
 before 0:0.8.5-1.EL.3
0:0.8.5-1.EL.3
gstreamer-plugins
Red Hat:enterprise_linux:4::es
 before 0:0.8.5-1.EL.3
0:0.8.5-1.EL.3
Show 5 moreShow less
Affected packages
PackageAffectedFixed
gstreamer-plugins-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:0.8.5-1.EL.3
0:0.8.5-1.EL.3
gstreamer-plugins-devel
Red Hat:enterprise_linux:4::es
 before 0:0.8.5-1.EL.3
0:0.8.5-1.EL.3
gstreamer-plugins
Red Hat:enterprise_linux:4::ws
 before 0:0.8.5-1.EL.3
0:0.8.5-1.EL.3
gstreamer-plugins-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:0.8.5-1.EL.3
0:0.8.5-1.EL.3
gstreamer-plugins-devel
Red Hat:enterprise_linux:4::ws
 before 0:0.8.5-1.EL.3
0:0.8.5-1.EL.3

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBOpenMPT 1.17.02.43 - Multiple Remote Buffer Overflows (PoC)2006-08-10

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

References

Show 27 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open