CVE:CVE-2017-11311
CNNVD:CNNVD-201707-781
OpenMPT是一个开源的音频处理程序。libopenmpt是一个跨平台的基于C和C++的音频播放库。
OpenMPT 1.26.12.00及之前的版本和libopenmpt 0.2.8461-beta26之前的版本中的soundlib/Load_psm.cpp文件存在堆缓冲区溢出漏洞。攻击者可借助特制的PSM文件利用该漏洞执行任意代码。
solution:Upgrade openmpt libopenmpt to a higher version than *:beta25,and avoid the version *:beta25; Upgrade openmpt openmpt to a higher version than 1.26.12.00,and avoid the version (,1.26.12.00]