Homepage

Out-of-bounds Write The advisory has been revoked - it doesn't affect any version of package abcm2ps  (opens in a new tab)

Threat Intelligence

EPSS
2.31% (90th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU2010-ABCM2PS-1032831
  • published5 May 2018
  • disclosed5 May 2018
Report a new vulnerability Found a mistake?

Introduced: 5 May 2018

CVE-2018-10753  (opens in a new tab)
CWE-787  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:20.10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream abcm2ps package and not the abcm2ps package as distributed by Ubuntu.

Stack-based buffer overflow in the delayed_output function in music.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

References