CVE-2011-1761

Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in libmodplug before 0.8.8.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ABC file. NOTE: some of these details are obtained from third party information.

• CWE-119

• http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060520.html
• http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html
• http://secunia.com/advisories/44388Vendor Advisory
• http://secunia.com/advisories/44695Vendor Advisory
• http://secunia.com/advisories/44870Vendor Advisory
• http://secunia.com/advisories/45742Vendor Advisory
• http://secunia.com/advisories/48058Vendor Advisory
• http://ubuntu.com/usn/usn-1148-1
• http://www.debian.org/security/2012/dsa-2415
• http://www.exploit-db.com/exploits/17222
• http://www.openwall.com/lists/oss-security/2011/05/02/1
• http://www.openwall.com/lists/oss-security/2011/05/02/19
• http://www.osvdb.org/72157
• http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060520.html
• http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html
• http://secunia.com/advisories/44388Vendor Advisory
• http://secunia.com/advisories/44695Vendor Advisory
• http://secunia.com/advisories/44870Vendor Advisory
• http://secunia.com/advisories/45742Vendor Advisory
• http://secunia.com/advisories/48058Vendor Advisory
• http://ubuntu.com/usn/usn-1148-1
• http://www.debian.org/security/2012/dsa-2415
• http://www.exploit-db.com/exploits/17222
• http://www.openwall.com/lists/oss-security/2011/05/02/1
• http://www.openwall.com/lists/oss-security/2011/05/02/19
• http://www.osvdb.org/72157

Published

Jun 7, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1755jabberd2 before 2.2.14 does not properly detect recursion du…7.5
• CVE-2011-1756modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does no…
• CVE-2011-1757DJabberd 0.84 and earlier does not properly detect recursion…
• CVE-2011-1758The krb5_save_ccname_done function in providers/krb5/krb5_au…
• CVE-2011-1759Integer overflow in the sys_oabi_semtimedop function in arch…
• CVE-2011-1760utils/opcontrol in OProfile 0.9.6 and earlier might allow lo…
• CVE-2011-1762A flaw exists in Wordpress related to the 'wp-admin/press-th…6.5
• CVE-2011-1763The get_free_port function in Xen allows local authenticated…
• CVE-2011-1764Format string vulnerability in the dkim_exim_verify_finish f…
• CVE-2011-1765Cross-site scripting (XSS) vulnerability in MediaWiki before…
• CVE-2011-1766includes/User.php in MediaWiki before 1.16.5, when wgBlockDi…
• CVE-2011-1767net/ipv4/ip_gre.c in the Linux kernel before 2.6.34, when ip…