CVE-2016-9960

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html · Third Party Advisory
• lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html · Third Party Advisory
• openwall.com/lists/oss-security/2016/12/15/11 · Mailing List
• securityfocus.com/bid/95305 · Third Party Advisory
• bitbucket.org/mpyne/game-music-emu/wiki/Home · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LKMKVYS7AVB2EXC463FUYN6C6FABHME
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7Z2OVERYM6NW3FGVGTJUNSL5ZNFSH2S
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHAQI5Q2XDSPGRRKPJJM3A73VWAFSFL

game-music-emu のその他の脆弱性

• CVE-2017-17446中 6.5The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Emu library (aka game-music-emu) 0.6.1 does not ensure a non-n…
• CVE-2016-9961緊急 9.8game-music-emu before 0.6.1 mishandles unspecified integer values.
• CVE-2016-9959高 7.8game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.
• CVE-2016-9958高 7.8game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.
• CVE-2016-9957高 7.8Stack-based buffer overflow in game-music-emu before 0.6.1.