CVE-2016-9957

Description

References

• lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html · Third Party Advisory
• lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html · Third Party Advisory
• openwall.com/lists/oss-security/2016/12/15/11 · Mailing List
• securityfocus.com/bid/95305 · Third Party Advisory
• bitbucket.org/mpyne/game-music-emu/wiki/Home · Patch
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LKMKVYS7AVB2EXC463FUYN6C6FABHME
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7Z2OVERYM6NW3FGVGTJUNSL5ZNFSH2S
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHAQI5Q2XDSPGRRKPJJM3A73VWAFSFL
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHFKIFSFIDXOKFUKAH2MBNXDTY6DYBF6
• scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html · Exploit
• security.gentoo.org/glsa/201707-02

More vulnerabilities in game-music-emu

• CVE-2017-17446MEDIUM 6.5The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Emu library (aka game-music-emu) 0.6.1 does not ensure a non-n…
• CVE-2016-9961CRITICAL 9.8game-music-emu before 0.6.1 mishandles unspecified integer values.
• CVE-2016-9960MEDIUM 5.5game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).
• CVE-2016-9959HIGH 7.8game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.
• CVE-2016-9958HIGH 7.8game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.