PT-2004-2186 · Abc2Midi · Abc2Midi

Published 2004-12-22 · Updated 2017-07-11 · CVE-2004-1256

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: abc2midi version 2004.12.04

Description: The issue is related to multiple buffer overflows in the event text and event specific functions. These overflows can be triggered by remote attackers sending crafted ABC files, potentially allowing them to execute arbitrary code.

Recommendations: For abc2midi version 2004.12.04, consider disabling the event text and event specific functions until a patch is available to prevent potential exploitation.

Exploit

Fix

Related Identifiers

CVE-2004-1256

Affected Products

Abc2Midi

References · 8

• 🔥 https://exploit-db.com/exploits/25019 · Exploit
• 🔥 http://tigger.uic.edu/~jlongs2/holes/abc2midi.txt · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-1256 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2004-1256 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1256 · Security Note
• https://osv.dev/vulnerability/CVE-2004-1256 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18574 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18573 · Note