PatchTheCVEextended module player vulnerabilities and fixes
Recent CVEs affecting extended module player, with upgrade or downgrade steps. 1 tracked.
Also searched as: extendedmoduleplayer.
extended module player has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2014-02-11. Highest priority: CVE-2013-1980 (score 51/100).
- CVE-2013-1980 MEDIUM 6.8 UPGRADE Buffer overflow in the get_dsmp function in loaders/masi_load.c in libxmp before 4.1.0 allows remote attackers
FAQ
How do I fix extended module player vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is extended module player being exploited right now?
None of the tracked extended module player CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which extended module player CVE should I patch first?
CVE-2013-1980 currently ranks highest (51/100): Buffer overflow in the get_dsmp function in loaders/masi_load.c in libxmp before 4.1.0 allows remote attackers.