Non notée
CVE-2017-5332 The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory,…
Description
The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| icoutils | Versions non publiées |
Références
- RHSA-2017:0837 rhn.redhat.com
- openSUSE-SU-2017:0167 lists.opensuse.org
- [oss-security] 20170110 Re: CVE Request: icoutils: exploitable crash in wrestool programm www.openwall.com
- 95380 www.securityfocus.com
- DSA-3765 www.debian.org
- openSUSE-SU-2017:0168 lists.opensuse.org
- USN-3178-1 www.ubuntu.com
- openSUSE-SU-2017:0166 lists.opensuse.org
- bugzilla.redhat.com bugzilla.redhat.com
- git.savannah.gnu.org git.savannah.gnu.org
Chronologie
- Publiée
- Dernière modification