CVE-2017-15266

Description

References

• lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00002.html · Mailing List
• openwall.com/lists/oss-security/2017/10/11/1 · Mailing List
• securityfocus.com/bid/101271 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Exploit
• lists.debian.org/debian-lts-announce/2017/12/msg00000.html

More vulnerabilities in libextractor

• CVE-2019-15531MEDIUM 6.5GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
• CVE-2018-20431MEDIUM 6.5GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function process_metadata() in plugins/ole2_extractor.c.
• CVE-2018-20430MEDIUM 6.5GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function history_extract() in plugins/ole2_extractor.c, related …
• CVE-2018-16430HIGH 8.8GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTOR_zip_extract_method() in zip_extractor.c.
• CVE-2018-14347MEDIUM 6.5GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTOR_mpeg_extract_method (mpeg_extractor.c).