libmodplug

• Author: kikadf
• Vulnerable: 0.8.8.4-2
• Unaffected: 0.8.8.5-1arcturus1

Several vulnerabilities have been discovered in libmodplug, a library for mod music based on ModPlug, that might allow arbitrary code execution when processing specially-crafted ABC files through applications using the library, such as media players.

CVEs:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4233
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4234