ABC2MTEX Process ABC Key Field Buffer Overflow Vulnerability

Bugtraq ID:	12018
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 15 2004 12:00AM
Updated:	Dec 15 2004 12:00AM
Credit:	Discovery is credited to Limin Wang.
Vulnerable:	abc2mtex abc2mtex 1.6.1
Not Vulnerable:

ABC2MTEX Process ABC Key Field Buffer Overflow Vulnerability

abc2mtex is prone to a buffer overflow vulnerability. This issue is exposed when the program is used to convert ABC music notation files to MTEX format. In particular, the issue is due to insufficient bounds checking of key data in ABC notation files. Since the ABC files may originate from an external or untrusted source, this issue is considered remote in nature.

Successful exploitation will result in execution of arbitrary code in the context of the user running the application.

ABC2MTEX Process ABC Key Field Buffer Overflow Vulnerability

The following exploit example was published:

• /data/vulnerabilities/exploits/79.abc.zip

ABC2MTEX Process ABC Key Field Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

ABC2MTEX Process ABC Key Field Buffer Overflow Vulnerability

References:

• [remote] [control] abc2mtex 1.6.1 process_abc overflows key buffer ("D. J. Bernstein" )
  
• abc2mtex Homepage (abc2mtex)