CVE-2017-1000418

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The WildMidi_Open function in WildMIDI since commit d8a466829c67cacbb1700beded25c448d99514e5 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published: Jan 2, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-10004197.5phpBB version 3.2.0 is vulnerable to SSRF in the Remote Avatar function resulting allowing an attacker to perform port scanning, requesting CVE-2017-10004207.5Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite CVE-2017-10004219.8Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the read_gif function resulting potential code execution CVE-2017-10004228.8Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gif_get_lzw function resulting in memory corruption and p CVE-2017-10004239.8b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation (backslash and single quote escape) in basic install functionality resu CVE-2017-10004244.3Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loadi CVE-2017-10004256.1Cross-site scripting (XSS) vulnerability in the /html/portal/flash.jsp page in Liferay Portal CE 7.0 GA4 and older allows remote attackers t CVE-2017-10004266.1MapProxy version 1.10.3 and older is vulnerable to a Cross Site Scripting attack in the demo service resulting in possible information discl CVE-2017-10004276.1marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser.CVE-2017-10004286.1flatCore-CMS 1.4.6 is vulnerable to reflected XSS in user_management.php due to the use of $_SERVER['PHP_SELF'] to build links and a stored CVE-2017-10004296.1rui Li finecms 5.0.10 is vulnerable to a reflected XSS in the file Weixin.php.CVE-2017-10004309.8rust-base64 version <= 0.5.1 is vulnerable to a buffer overflow when calculating the size of a buffer to use when encoding base64 using the