20170808 wildmidi multiple vulnerabilitiesmailing list
http://seclists.org/fulldisclosure/2017/Aug/12 CVE-2017-11664
MEDIUM
WildMIDI 0.4.2 - Multiple Vulnerabilities
Record summary
CVE-2017-11664 has a selected CVSS score of 6.5 (medium); EIP currently links 1 catalogued exploit.
Description
The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBWildMIDI 0.4.2 - Multiple VulnerabilitiesExploitDB exploitby qflb.wuNot analyzed1 file
References
4github.comConfirmation
https://github.com/Mindwerks/wildmidi/commit/ad6d7cf88d6673167ca1f517248af9409a9f1be1 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2017-11664 42433exploit
https://www.exploit-db.com/exploits/42433