Hi, * Remi Denis-Courmont <r...@remlab.net> [2011-04-10 09:36]: > An exploitable memory corruption vulnerability has been publicized > against libmodplug 0.8.8.1: > http://seclists.org/fulldisclosure/2011/Apr/113 > > Upstream version 0.8.8.2 fixes the issue.
How important is this library for vlc and others from an end-user perspective? The code doesn't look like it was written with security in mind and I guess it's only a matter of time for new issues to popup for this lib. Cheers Nico -- Nico Golde - http://www.ngolde.de - n...@jabber.ccc.de - GPG: 0xA0A0AAAA For security reasons, all text in this mail is double-rot13 encrypted.
pgpApvZkTxRVR.pgp
Description: PGP signature