CVE-2019-1010069

CVE-2019-1010069 affects moinejf abcm2ps 8.13.20. The vulnerability is an Incorrect Access Control in front.c, function txt_add, enabling a crafted file to cause a denial of service. The fixed version is implemented after commit 08aef597656d065e86075f3d53fda89765845eae. Available references from ...

CVE-2018-10753

CVE-2018-10753 is a stack-based buffer overflow in the delayed_output function of music.c in abcm2ps (up to release 8.13.20). It allows remote attackers to cause a denial of service (crash) and potentially other impact. Debian LTS and related advisories document a fix in abcm2ps version 7.8.9-1+d...

CVE-2018-10771

CVE-2018-10771 affects abcm2ps up to version 8.13.20, via a stack-based buffer overflow in the get_key function in parse.c that can trigger a remote denial of service (application crash) or possibly other impact. The connected advisories note multiple memory/array access issues in abcm2ps (CVE-20...

CVE-2010-4743

CVE-2010-4743 is a heap-based buffer overflow in the getarena() function of abc2ps.c in abcm2ps prior to 5.9.13, enabling remote code execution via a crafted ABC file. The issue is part of a set of vulnerabilities affecting abcm2ps (including CVE-2010-3441 and CVE-2010-4744). Remediation in the c...

CVE-2010-3441

Abcm2ps is affected by CVE-2010-3441 and related CVEs. The issues are boundary errors in the PUT0/PUT1 macros, the trim_title() function, or a long -O command line option, leading to buffer overflows in versions before 5.9.13. A related heap-based overflow (CVE-2010-4743) in getarena() can also e...

CVE-2010-4744

CVE-2010-4744 concerns abcm2ps and is described in multiple sources (GLSA 201111-12, OpenVAS entries) as one of several vulnerabilities affecting the package. The Gentoo GLSA states users should upgrade to abcm2ps-5.9.13 or newer to mitigate the issues; Fedora/OSS advisories reference the same CV...

CVE-2004-1258

This CVE-2004-1258 entry concerns abcm2ps 3.7.20. A buffer overflow in the put_words function (subs.c) permits remote attackers to execute arbitrary code via crafted ABC files. The issue is notable for its potential for arbitrary code execution with network-based access and no required authentica...