CVE-2004-1256 Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004.12.04 allow remote attackers to execute arbitrary code via crafted ABC files.
HighCVSS 10.0
EPSS 10.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004.12.04 allow remote attackers to execute arbitrary code via crafted ABC files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| abcmidi | = 2004-12-04 | No fix listed |
| debian/abcmidi(Debian:12) | < 20050101-1 | 20050101-1 |
| debian/abcmidi(Debian:13) | < 20050101-1 | 20050101-1 |
| debian/abcmidi(Debian:14) | < 20050101-1 | 20050101-1 |
References
- Debian Security Tracker CVE-2004-1256 vendor-advisory
- tigger.uic.edu exploit vendor-advisory
- abc2midi-eventtext-bo(18573) vdb-entry
- abc2midi-eventspecific-bo(18574) vdb-entry