CVE-2016-9961

Description

References

• lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html · Third Party Advisory
• lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html · Third Party Advisory
• openwall.com/lists/oss-security/2016/12/15/11 · Mailing List
• securityfocus.com/bid/95305 · Third Party Advisory
• bitbucket.org/mpyne/game-music-emu/wiki/Home · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LKMKVYS7AVB2EXC463FUYN6C6FABHME
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7Z2OVERYM6NW3FGVGTJUNSL5ZNFSH2S
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHAQI5Q2XDSPGRRKPJJM3A73VWAFSFL

More vulnerabilities in game-music-emu

• CVE-2017-17446MEDIUM 6.5The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Emu library (aka game-music-emu) 0.6.1 does not ensure a non-n…
• CVE-2016-9960MEDIUM 5.5game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).
• CVE-2016-9959HIGH 7.8game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.
• CVE-2016-9958HIGH 7.8game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.
• CVE-2016-9957HIGH 7.8Stack-based buffer overflow in game-music-emu before 0.6.1.