返回 CVE 瀏覽器

CVE-2010-3441

HIGH

7.5

CVSS Severity Score

EPSS Score0.0430%

EPSS Percentile13.27th

Published2011年2月18日

Last Modified2026年4月29日

Vulnerability Description

Multiple buffer overflows in abcm2ps before 5.9.12 might allow remote attackers to execute arbitrary code via (1) a crafted input file, related to the PUT0 and PUT1 output macros; (2) a crafted input file, related to the trim_title function; and possibly (3) a long -O option on a command line.

Affected Platforms (CPE)

📦

Moinejf

Abcm2ps

< 5.9.12

💻

Fedoraproject

Fedora

= 14

References & Advisories

🔗 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577014

🔗 http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054015.html

🔗 http://moinejf.free.fr/abcm2ps-5.txt

🔗 http://secunia.com/advisories/39345

🔗 http://secunia.com/advisories/43338

🔗 http://www.openwall.com/lists/oss-security/2010/04/08/5

🔗 http://www.openwall.com/lists/oss-security/2010/04/08/6

🔗 http://www.openwall.com/lists/oss-security/2010/04/08/7

相關漏洞威脅

CVE-2010-474410.0

Multiple unspecified vulnerabilities in abcm2ps before 5.9.13 have unknown impact and attack vectors, a different issue than CVE-2...

CVE-2004-125810.0

Buffer overflow in the put_words function in subs.c for abcm2ps 3.7.20 allows remote attackers to execute arbitrary code via craft...

CVE-2018-107539.8

Stack-based buffer overflow in the delayed_output function in music.c in abcm2ps through 8.13.20 allows remote attackers to cause ...

CVE-2018-107719.8

Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows remote attackers to cause a denia...