CVE:CVE-2018-10771
CNNVD:CNNVD-201805-203
abcm2ps是一款能够将音乐曲调从ABC符号转换为PostScript或SVG格式的命令行程序。
abcm2ps 8.13.20及之前版本中的parse.c文件的‘get_key’函数存在基于栈的缓冲区溢出漏洞。远程攻击者可利用该漏洞造成拒绝服务（应用程序崩溃）。
solution:Upgrade moinejf abcm2ps to a higher version than 8.13.20,and avoid the version (,8.13.20]; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 30,31,32,and avoid the version 30,31,32