MantisBT - Zandronum
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0002961Zandronum[All Projects] Bugpublic2016-12-16 16:172018-09-30 21:48
ReporterBalrog 
Assigned ToTorr Samaho 
PriorityhighSeverityexploitReproducibilityhave not tried
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version2.1 
Target Version3.0Fixed in Version3.0 
Summary0002961: Code execution vulnerability in Game_Music_Emu
Description'http://forum.zdoom.org/viewtopic.php?f=7&t=54613 [^]'

The tl;dr is that Game_Music_Emu has a couple bugs in it that can enable arbitrary code execution by playing a malformed SPC file. The fix is trivial, and already pushed to ZDoom git, but I'm still reporting it here because it's a security bug and fixing it requires rebuilding with an updated libgme if it's statically linked.
Steps To Reproduce
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2016-12-16 16:17BalrogNew Issue
2016-12-22 19:49Torr SamahoNote Added: 0016541
2016-12-22 19:49Torr SamahoProduct Version => 2.1
2016-12-22 19:49Torr SamahoTarget Version => 3.0
2016-12-22 19:49Torr SamahoAssigned To => Torr Samaho
2016-12-22 19:49Torr SamahoStatusnew => needs testing
2017-03-06 05:47Ru5tK1ngNote Added: 0016951
2017-03-06 05:47Ru5tK1ngStatusneeds testing => resolved
2017-03-06 05:47Ru5tK1ngResolutionopen => fixed
2017-03-06 05:47Ru5tK1ngFixed in Version => 3.0
2018-09-30 21:48Blzut3Statusresolved => closed

Notes
(0016541)
Torr Samaho   
2016-12-22 19:49   
I backported the ZDoom patch.
(0016951)
Ru5tK1ng   
2017-03-06 05:47   
I'm not sure this can be tested unless someone tries to fiddle with a 'dirty' SPC file. I'd say this is safe to close unless someone feels otherwise.