CVE catalog

CVE-2006-3879

libmikmod: CVE-2006-3879

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
9.46% · Oct 25, 2026

Integer overflow in the loadChunk function in loaders/load_gt2.c in libmikmod in Mikmod Sound System 3.2.2 allows remote attackers to cause a denial of service via a GRAOUMF TRACKER (GT2) module file with a large (0xffffffff) comment length value in an XCOM chunk.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibmikmodsid3.3.15-1not affected
Debianlibmikmodforky3.3.15-1not affected
Debianlibmikmodtrixie3.3.13-1not affected
Debianlibmikmodbookworm3.3.11.1-7not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
DebianlibmikmodsourcesidNot affectedunimportantNot reportedNot reported
DebianlibmikmodsourceforkyNot affectedunimportantNot reportedNot reported
DebianlibmikmodsourcetrixieNot affectedunimportantNot reportedNot reported
DebianlibmikmodsourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libmikmod3]Not affected

    Source package: [libmikmod]

    Details (2)
    • 3.3.11.1-7 · amd64 · bookworm

      Not affected

      dsa · libmikmod · debian · bookworm

    • 3.3.11.1-7 · arm64 · bookworm

      Not affected

      dsa · libmikmod · debian · bookworm

  • [libmikmod-config]Not affected

    Source package: [libmikmod]

    Details (2)
    • 3.3.11.1-7 · all · bookworm

      Not affected

      dsa · libmikmod · debian · bookworm

    • 3.3.11.1-7 · all · bookworm

      Not affected

      dsa · libmikmod · debian · bookworm

  • [libmikmod-dev]Not affected

    Source package: [libmikmod]

    Details (2)
    • 3.3.11.1-7 · amd64 · bookworm

      Not affected

      dsa · libmikmod · debian · bookworm

    • 3.3.11.1-7 · arm64 · bookworm

      Not affected

      dsa · libmikmod · debian · bookworm

Observed:

References