PT-2004-2186 · Abc2Midi · Abc2Midi

Publicado 2004-12-22 · Atualizado 2017-07-11 · CVE-2004-1256

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: abc2midi version 2004.12.04

Description: The issue is related to multiple buffer overflows in the event text and event specific functions. These overflows can be triggered by remote attackers sending crafted ABC files, potentially allowing them to execute arbitrary code.

Recommendations: For abc2midi version 2004.12.04, consider disabling the event text and event specific functions until a patch is available to prevent potential exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2004-1256

Produtos afetados

Abc2Midi

Referências · 8

• 🔥 https://exploit-db.com/exploits/25019 · Exploit
• 🔥 http://tigger.uic.edu/~jlongs2/holes/abc2midi.txt · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18574 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-1256 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18573 · Nota
• https://security-tracker.debian.org/tracker/CVE-2004-1256 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-1256 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2004-1256 · Aviso do Fabricante