ABC2PS/JCABC2PS Voice Field Buffer Overflow Vulnerability

Bugtraq ID:	12024
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 15 2004 12:00AM
Updated:	Dec 15 2004 12:00AM
Credit:	Discovery is credited to Tom Palarz and Limin Wang.
Vulnerable:	John Chambers jcabc2ps 20040902 abc2ps abc2ps 1.2
Not Vulnerable:

ABC2PS/JCABC2PS Voice Field Buffer Overflow Vulnerability

abc2ps and jcabc2ps are prone to a buffer overflow vulnerability. This issue is exposed when the program is used to process the voice field in ABC music notation files. Since the ABC files may originate from an external or untrusted source, this issue is considered remote in nature.

Successful exploitation will result in execution of arbitrary code in the context of the user running the application.

ABC2PS/JCABC2PS Voice Field Buffer Overflow Vulnerability

The following exploit example has been published:

• /data/vulnerabilities/exploits/74.abc.zip

ABC2PS/JCABC2PS Voice Field Buffer Overflow Vulnerability

Solution:
The jcabc2ps vendor, John Chambers, has developed a fix that does not appear to be publicly available through the vendor Web site at this time. Users should contact the vendor to obtain a fixed version of the software.

ABC2PS/JCABC2PS Voice Field Buffer Overflow Vulnerability

References:

• [remote] [control] jcabc2ps switch_voice() overflows t1 buffer ("D. J. Bernstein" )
  
• jcabc2ps Homepage (John Chambers)
  
• Re: [remote] [control] jcabc2ps switch_voice() overflows t1 buffer (John Chambers )