WildMIDI Denial of Service Vulnerability (CNVD-2017-25774)

WildMIDI is a free and open source software synthesizer that converts MIDI note data into an audio signal using GUS sound patches without the need for a GUS patch compatible sound card. A denial of service vulnerability exists in the WMSetupMidiEvent function in internalmidi.c:2315 in WildMIDI,...

CVE-2017-12442

The rowisempty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...

Design/Logic Flaw

The WMParseNewMidi function in fmidi.c in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid file...

CVE-2017-12444

The mdjvubitmapgetboundingbox function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...

CVE-2017-12441

The rowisempty function in base/4bitmap.c:274 in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...

CVE-2017-11661

The WMSetupMidiEvent function in internalmidi.c:2318 in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid file...

Code injection

The mdjvubitmapgetboundingbox function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...

CVE-2017-11663

The WMSetupMidiEvent function in internalmidi.c:2315 in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid file...

UBUNTU-CVE-2017-12444

The mdjvubitmapgetboundingbox function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...

Design/Logic Flaw

The WMSetupMidiEvent function in internalmidi.c:2318 in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid file...

Design/Logic Flaw

The mdjvubitmappackrow function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...

Code injection

The rowisempty function in base/4bitmap.c:274 in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...

Design/Logic Flaw

The JB2BitmapCoder::coderowbyrefinement function in jb2/bmpcoder.cpp in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...

CVE-2017-11661

The WMSetupMidiEvent function in internalmidi.c:2318 in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid file...

CVE-2017-12445

The JB2BitmapCoder::coderowbyrefinement function in jb2/bmpcoder.cpp in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...

CVE-2017-12442

The rowisempty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...

CVE-2017-12442

The rowisempty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...

CVE-2017-11661

The WMSetupMidiEvent function in internalmidi.c:2318 in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid file...

CVE-2017-12441

CVE-2017-12441 affects minidjvu 0.8, where the function row_is_empty in base/4bitmap.c:274 can trigger a denial of service due to an invalid memory read when processing a crafted DjVu file. The vulnerability is a DoS vector; the provided documents describe the root cause but do not include explic...

CVE-2017-12443

The CVE-2017-12443 entry relates to minidjvu 0.8, where the function mdjvu_bitmap_pack_row in base/4bitmap.c can trigger a denial of service via a crafted DJVU file due to an invalid memory read that crashes the application. The available connected documents confirm the vulnerable component and b...