Limin Wang has reported two vulnerabilities in abctab2ps, allowing malicious people to compromise a vulnerable system.

The vulnerability is caused due to boundary errors in the "write_heading()" and "trim_title()" functions, which is used when converting abc files into ps format. This can be exploited to cause a buffer overflow via a specially crafted abc document.

Successful exploitation allows execution of arbitrary code, but requires that a user is tricked into converting a malicious abc document.

The vulnerabilities have been reported in version 1.6.3. Prior versions may also be vulnerable.

Solution
Do not open abc files from untrusted sources.
Further details available in Customer Area

Provided and/or discovered by
Limin Wang

Changelog
Further details available in Customer Area

Original Advisory
http://tigger.uic.edu/~jlongs2/holes/abctab2ps.txt

Deep Links
Links available in Customer Area