media-sound/abcm2ps-8.14.15 — Security Advisories

portage-ng glsa

▸ GLSA 201111-12 abcm2ps: Multiple vulnerabilities this version unaffected normal remote 2011-11-20

Multiple vulnerabilities, including buffer overflows, have been found in abcm2ps.

Announced: 2011-11-20
Revised: 2011-11-20
Access: remote
Bugs: #322859
Advisory: https://security.gentoo.org/glsa/201111-12

Affected packages

Package	Arch	Vulnerable	Unaffected
media-sound/abcm2ps	*	< 5.9.13	>= 5.9.13

Background

abcm2ps is a program to convert abc files to Postscript files.

Description

Multiple vulnerabilities have been discovered in abcm2ps:

Boundary errors in the PUT0 and PUT1 macros, the trim_title() function, or a long "-O" command line option can lead to a buffer overflow (CVE-2010-3441).
A vulnerability in the getarena() function in abc2ps.c can cause a heap-based buffer overflow in abcm2ps (CVE-2010-4743).
Multiple unspecified vulnerabilities (CVE-2010-4744).

Impact

A remote attacker could entice a user to load a specially crafted ABC file or use a long -O option on the command line, resulting in the execution of arbitrary code.

Workaround

There is no known workaround at this time.

Resolution

All abcm2ps users should upgrade to the latest stable version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-sound/abcm2ps-5.9.13"

NOTE: This is a legacy GLSA. Updates for all affected architectures are available since August 27, 2010. It is likely that your system is already no longer affected by this issue.

References

▸ GLSA 200412-18 abcm2ps: Buffer overflow vulnerability this version unaffected normal remote 2004-12-19

abcm2ps is vulnerable to a buffer overflow that could lead to remote execution of arbitrary code.

Announced: 2004-12-19
Revised: 2004-12-19 (revision 2)
Access: remote
Bugs: #74702
Advisory: https://security.gentoo.org/glsa/200412-18

Affected packages

Package	Arch	Vulnerable	Unaffected
media-sound/abcm2ps	*	< 3.7.21	>= 3.7.21

Background

abcm2ps is a utility used to convert ABC music sheet files into PostScript format.

Description

Limin Wang has located a buffer overflow inside the put_words() function in the abcm2ps code.

Impact

A remote attacker could convince the victim to download a specially-crafted ABC file. Upon execution, this file would trigger the buffer overflow and lead to the execution of arbitrary code with the permissions of the user running abcm2ps.

Workaround

There is no known workaround at this time.

Resolution

All abcm2ps users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-sound/abcm2ps-3.7.21"