Title: ABCPP Directive Handler Buffer Overflow Vulnerability
Severity: HIGH
Description:
abcpp is a preprocessor for ABC music notation files. It is available for UNIX/Linux variants.
abcpp is prone to a buffer overflow vulnerability. This issue is exposed when the program is used to handle directives in ABC music notation files. Since the ABC files may originate from an external or untrusted source, this issue is considered remote in nature.
The specific issue exists in the handle_directive() function in 'abcpp.c'. This issue occurs when the program copies an ABC directive into a finite buffer.
Successful exploitation will result in execution of arbitrary code in the context of the user running the application.
Affected Products:
- abcpp abcpp 1.3.0.0
References:
- "D. J. Bernstein" <djb@cr.yp.to>: [remote] [control] abcpp 1.3.0 process_directive overflows token buffer
- abcpp: abcpp Homepage
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
