CVE-2006-3668

no score yetEPSS 10%

Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted attackers to execute arbitrary code via a ".it" (Impulse Tracker) file with an envelope with a large number of nodes.

EPSS: 10% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2006-07-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

dynamic_universal_music_bibliotheque:dumb

References

http://aluigi.altervista.org/adv/dumbit-adv.txt
http://secunia.com/advisories/21092
http://secunia.com/advisories/21184
http://secunia.com/advisories/21416
http://securityreason.com/securityalert/1240

Check your stack JSON