Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

abc2ps: buffer overflows

Package(s):

abc2ps abcmidi

CVE #(s):

CVE-2006-1513 CVE-2006-1514

Created:

April 25, 2006

Updated:

April 26, 2006

Description:

Erik Sjölund discovered that abc2ps, a translator for ABC music description files into PostScript, does not check the boundaries when reading in ABC music files resulting in buffer overflows.

The abcmidi-yaps utility suffers from similar problems.

Alerts:

Debian	DSA-1043-1	2006-04-26
Debian	DSA-1041-1	2006-04-25

(Log in to post comments)