Description
A vulnerability has been reported in libxmp, which can be exploited by
malicious people to compromise an application using the library.
The vulnerability is caused due to a boundary error in the "get_dsmp"()
function (src/loaders/masi_load.c) when parsing MASI files, which can be
exploited to cause a buffer overflow.
Successful exploitation may allow execution of arbitrary code.
The vulnerability is reported in versions prior to 4.1.0.
Solution
Update to version 4.1.0.
Provided and/or discovered by
The vendor credits Douglas Carmichael.
Original Advisory
http://sourceforge.net/projects/xmp/files/libxmp/4.1.0/Changelog/view
Commit:
http://sourceforge.net/p/xmp/libxmp/ci/a015fdfb478a60172fd225632a11bbd02870fc40/
[1]: https://secunia.com/advisories/53114/
--
Agostino Sarubbo
Gen