Multiple buffer overflows in the (1) eventtext and (2) eventspecific functions in abc2midi 2004.12.04 allow remote attackers to execute arbitrary code via crafted ABC files.
{ "urgency": "not yet assigned" }