Hi,
* Remi Denis-Courmont <r...@remlab.net> [2011-04-10 09:36]:
> An exploitable memory corruption vulnerability has been publicized
> against libmodplug 0.8.8.1:
> http://seclists.org/fulldisclosure/2011/Apr/113
> 
> Upstream version 0.8.8.2 fixes the issue.

How important is this library for vlc and others from an end-user perspective?
The code doesn't look like it was written with security in mind and I guess 
it's only a matter of time for new issues to popup for this lib.

Cheers
Nico
-- 
Nico Golde - http://www.ngolde.de - n...@jabber.ccc.de - GPG: 0xA0A0AAAA
For security reasons, all text in this mail is double-rot13 encrypted.

Attachment: pgpApvZkTxRVR.pgp
Description: PGP signature

Reply via email to