CVE-2016-9959
Summary
| CVE | CVE-2016-9959 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-04-12 20:59:00 UTC |
| Updated | 2023-11-07 02:37:00 UTC |
| Description | game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values. |
Risk And Classification
Problem Types: CWE-125 | CWE-787
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Game-music-emu Project | Game-music-emu | All | All | All | All |
| Operating System | Opensuse | Leap | 42.2 | All | All | All |
| Operating System | Opensuse | Leap | 42.2 | All | All | All |
| Operating System | Opensuse | Opensuse | 12.1 | All | All | All |
| Operating System | Opensuse | Opensuse | 12.1 | All | All | All |
| Operating System | Opensuse Project | Leap | 42.1 | All | All | All |
| Operating System | Opensuse Project | Leap | 42.1 | All | All | All |
| Operating System | Suse | Linux Enterprise | 12.0 | All | All | All |
| Operating System | Suse | Linux Enterprise | 12.0 | All | All | All |
| Operating System | Suse | Linux Enterprise Desktop | 12 | All | All | All |
| Operating System | Suse | Linux Enterprise Desktop | 12 | All | All | All |
| Operating System | Suse | Linux Enterprise Software Development Kit | 12 | All | All | All |
| Operating System | Suse | Linux Enterprise Software Development Kit | 12 | All | All | All |
| Operating System | Suse | Linux Enterprise Workstation Extension | 12 | All | All | All |
| Operating System | Suse | Linux Enterprise Workstation Extension | 12 | All | All | All |
| Operating System | Suse | Suse Linux Enterprise Server | 12 | All | All | All |
| Operating System | Suse | Suse Linux Enterprise Server | 12 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| [security-announce] SUSE-SU-2016:3250-1: important: Security update for | SUSE | lists.opensuse.org | Third Party Advisory |
| [SECURITY] Fedora 25 Update: audacious-3.8.2-1.fc25 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 25 Update: game-music-emu-0.6.1-1.fc25 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | Third Party Advisory |
| [security-announce] openSUSE-SU-2017:0022-1: important: Security update | SUSE | lists.opensuse.org | Third Party Advisory |
| Security: Redux: compromising Linux using... SNES Ricoh 5A22 processor opcodes?! | MISC | scarybeastsecurity.blogspot.in | Exploit, Technical Description, Third Party Advisory |
| mpyne / game-music-emu / wiki / Home — Bitbucket | CONFIRM | bitbucket.org | Patch |
| [SECURITY] Fedora 25 Update: game-music-emu-0.6.1-1.fc25 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 24 Update: audacious-plugins-3.7.2-2.fc24 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| Game Music Emu: Multiple vulnerabilities (GLSA 201707-02) — Gentoo security | GENTOO | security.gentoo.org | |
| [SECURITY] Fedora 24 Update: game-music-emu-0.6.1-1.fc24 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| oss-security - Re: CVE Request: Game Music Emulators: incorrect emulation of the SPC700 audio co-processor of SNES: arbitrary code execution via malformed SPC music file | MLIST | www.openwall.com | Mailing List, Third Party Advisory |
| [SECURITY] Fedora 24 Update: audacious-plugins-3.7.2-2.fc24 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | Third Party Advisory |
| Game Music Emulators Multiple Memory Corruption Vulnerabilities | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| [SECURITY] Fedora 24 Update: game-music-emu-0.6.1-1.fc24 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | Third Party Advisory |
| [SECURITY] Fedora 25 Update: audacious-3.8.2-1.fc25 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 710517 Gentoo Linux Game Music Emu Multiple Vulnerabilities (GLSA 201707-02)