CVE-2004-1258 Buffer overflow in the put_words function in subs.c for abcm2ps 3.7.20 allows remote attackers to execute arbitrary code via crafted ABC files.
HighCVSS 10.0
EPSS 6.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the put_words function in subs.c for abcm2ps 3.7.20 allows remote attackers to execute arbitrary code via crafted ABC files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| moinejf abcm2ps | = 3.7.20 | No fix listed |
| debian/abcm2ps(Debian:12) | < 4.8.5-1 | 4.8.5-1 |
| debian/abcm2ps(Debian:13) | < 4.8.5-1 | 4.8.5-1 |
| debian/abcm2ps(Debian:14) | < 4.8.5-1 | 4.8.5-1 |
References
- tigger.uic.edu exploit vendor-advisory
- abcm2ps-putwords-bo(18579) vdb-entry
- Debian Security Tracker CVE-2004-1258 vendor-advisory