CVE-2006-4046

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

15.35%

Published

Aug 9, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

TrickestTrickest PoC index Exploit-DBOpen Cubic Player 2.6.0pre6/0.1.10_rc5 - Multiple Local Buffer Overflows

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple stack-based buffer overflows in Open Cubic Player 2.6.0pre6 and earlier for Windows, and 0.1.10_rc5 and earlier on Linux/BSD, allow remote attackers to execute arbitrary code via (1) a large .S3M file handled by the mpLoadS3M function, (2) a crafted .IT file handled by the itplayerclass::module::load function, (3) a crafted .ULT file handled by the mpLoadULT function, or (4) a crafted .AMS file handled by the mpLoadAMS function.

Affected Products (2)

open_cubic_player · open_cubic_playervulnerable

References (20)

http://aluigi.altervista.org/adv/ocpbof-adv.txt

http://secunia.com/advisories/21267

Vendor Advisory

http://securityreason.com/securityalert/1349

http://securitytracker.com/id?1016611

http://www.securityfocus.com/archive/1/441730/100/100/threaded

http://www.securityfocus.com/bid/19262

http://www.vupen.com/english/advisories/2006/3078

https://exchange.xforce.ibmcloud.com/vulnerabilities/28103