Skip to main content

Game Music Emu CVE-2017-17446

MEDIUM
Incorrect Conversion between Numeric Types (CWE-681)
2017-12-06 cve@mitre.org
Denial Of Service Game Music Emu
6.5
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Dec 06, 2017 - 19:29 cve.org
MEDIUM 6.5

DescriptionCVE.org

The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Emu library (aka game-music-emu) 0.6.1 does not ensure a non-negative size, which allows remote attackers to cause a denial of service (application crash) via a crafted file.

AnalysisAI

The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Emu library (aka game-music-emu) 0.6.1 does not ensure a non-negative size, which allows remote attackers to cause a. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-681. The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Emu library (aka game-music-emu) 0.6.1 does not ensure a non-negative size, which allows remote attackers to cause a denial of service (application crash) via a crafted file. Affected products include: Game-Music-Emu Project Game-Music-Emu.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Game Music Emu

View all
CVE-2016-9961 CRITICAL POC
9.8 Jun 06

game-music-emu before 0.6.1 mishandles unspecified integer values. Rated critical severity (CVSS 9.8), this vulnerabilit
CVE-2016-9959 HIGH POC
7.8 Apr 12

game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values. Rated high severity (CVSS 7.
CVE-2016-9958 HIGH POC
7.8 Apr 12

game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations. Rated high severity (CVSS 7.
CVE-2016-9957 HIGH POC
7.8 Apr 12

Stack-based buffer overflow in game-music-emu before 0.6.1. Rated high severity (CVSS 7.8), this vulnerability is no aut
CVE-2016-9960 MEDIUM POC
5.5 Jun 06

game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash). Rated me

Same weakness CWE-681 – Incorrect Conversion between Numeric Types

View all
CVE-2017-7308 HIGH POC
7.8
CVE-2016-3074 CRITICAL POC
9.8
CVE-2021-38187 CRITICAL POC
9.8
CVE-2022-34169 HIGH POC
7.5
CVE-2022-27882 HIGH POC
7.5
CVE-2021-27219 HIGH POC
7.5
CVE-2020-6582 HIGH POC
7.5
CVE-2019-16200 HIGH POC
7.5

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2017-17446 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy