OSVDB ID: 24974 Title: abcMIDI ABC Music File Handling Overflow |
Info |
|
|
Dates |
||||
|
|
Description |
A local overflow exists in abcMIDI. The product fails to limit the bytes read by sscanf in drawtune.c and yapstree.c resulting in a buffer overflow. With a specially crafted .ABC file, an attacker can cause the program to crash or possibly execute arbitrary code resulting in a loss of integrity or availability for the program. |
Classification |
Location:
Local Access Required
Attack Type: Denial of Service, Input Manipulation Impact: Loss of Integrity, Loss of Availability Exploit: Exploit Unknown Disclosure: OSVDB Verified |
Solution |
Debian users should upgrade to version 17-1woody1 or 20050101-1sarge1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. For other users, currently there are no known upgrades, patches, or workarounds available to correct this issue. |
Products |
|
References |
|
Credit |
|