Multiple buffer overflows in the (1) write_heading function in subs.cpp or (2) trim_title function in parse.cpp for abctab2ps 1.6.3 allow remote attackers to execute arbitrary code via crafted ABC files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Abctab2ps | Abctab2ps | 1.6.3 (including) | 1.6.3 (including) |
References
- http://tigger.uic.edu/~jlongs2/holes/abctab2ps.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18583
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18584
- http://tigger.uic.edu/~jlongs2/holes/abctab2ps.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18583
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18584