NetSight
medium5.5

CVE-2017-11546

The insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (divide-by-zero error and application cr…

Impact

The insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mid file. NOTE: a crash might be relevant when using the --background option.

Affected products

VendorProductAffected versions
Timidity\+\+ ProjectTimidity\+\+
Version 2.14.0

Weakness classification

References