Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 15 Dec 2016 06:38:03 +0100
From: Salvatore Bonaccorso <>
Subject: Re: CVE Request: Game Music Emulators: incorrect
 emulation of the SPC700 audio co-processor of SNES: arbitrary code execution
 via malformed SPC music file


On Thu, Dec 15, 2016 at 06:33:48AM +0100, Salvatore Bonaccorso wrote:
> Hi
> As reported by Chris Evans via
> Incorrect emulation of the SPC700 audio co-processor of the Super
> Nintendo Entertainment System allows the execution of arbitrary code
> if a malformed SPC music file is opened.
> Debian released a DSA for this issue (in the qemu-music-emu source
> package):

There is an obvious typo in the above, not qemu-music-emu, but


Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ