CVE-2004-1256
published 2005-01-10CVE-2004-1256: Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004.12.04 allow remote attackers to execute arbitrary code via…
PriorityP345critical10CVSS 2.0
AVNACLAuNCCICAC
EXPLOIT
EPSS
10.44%
95.2th percentile
Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004.12.04 allow remote attackers to execute arbitrary code via crafted ABC files.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| abcmidi | abcmidi | — | — |
| abcmidi | abcmidi | >= 0 < 20050101-1 | 20050101-1 |
| abcmidi | abcmidi | >= 0 < 20050101-1 | 20050101-1 |
| abcmidi | abcmidi | >= 0 < 20050101-1 | 20050101-1 |
| abcmidi | abcmidi | >= 0 < 20050101-1 | 20050101-1 |
| debian | abcmidi | < abcmidi 20050101-1 (bookworm) | abcmidi 20050101-1 (bookworm) |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv10.0CRITICAL
vendor_debian10.0CRITICAL
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-797x-27qc-m9q4: Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004
ghsa_unreviewed·2022-04-29
CVE-2004-1256 [HIGH] GHSA-797x-27qc-m9q4: Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004
Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004.12.04 allow remote attackers to execute arbitrary code via crafted ABC files.
OSV
CVE-2004-1256: Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004
osv·2005-01-10·CVSS 10.0
CVE-2004-1256 [CRITICAL] CVE-2004-1256: Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004
Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004.12.04 allow remote attackers to execute arbitrary code via crafted ABC files.
Debian
CVE-2004-1256: abcmidi - Multiple buffer overflows in the (1) event_text and (2) event_specific functions...
vendor_debian·2004·CVSS 10.0
CVE-2004-1256 [CRITICAL] CVE-2004-1256: abcmidi - Multiple buffer overflows in the (1) event_text and (2) event_specific functions...
Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004.12.04 allow remote attackers to execute arbitrary code via crafted ABC files.
Scope: local
bookworm: resolved (fixed in 20050101-1)
bullseye: resolved (fixed in 20050101-1)
forky: resolved (fixed in 20050101-1)
sid: resolved (fixed in 20050101-1)
trixie: resolved (fixed in 20050101-1)
No detection rules found.
No writeups or analysis indexed.
http://tigger.uic.edu/~jlongs2/holes/abc2midi.txthttps://exchange.xforce.ibmcloud.com/vulnerabilities/18573https://exchange.xforce.ibmcloud.com/vulnerabilities/18574http://tigger.uic.edu/~jlongs2/holes/abc2midi.txthttps://exchange.xforce.ibmcloud.com/vulnerabilities/18573https://exchange.xforce.ibmcloud.com/vulnerabilities/18574
2005-01-10
Published