8.4
Élevée
CVE-2024-42415 An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME…
Description
An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| G Structured File Library (libgsf) | 1.14.52 | Pas de correctif indiqué |
| libgsf | Versions non publiées |
Références
- talosintelligence.com talosintelligence.com
- gitlab.gnome.org gitlab.gnome.org
Chronologie
- Publiée
- Dernière modification