CVE-2006-3668: Dynamic Universal Music Bibliotheque Dumb

High severity, CVSS 7.6. EPSS: 10.1% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted attackers to execute arbitrary code via a ".it" (Impulse Tracker) file with an envelope with a large number of nodes.

Affected products

• Dynamic Universal Music Bibliotheque Dumb: up to and including 0.9.3

Published 2006-07-18. Last modified 2026-06-16.