CVE-2017-1000249

概要

参考情報

• debian.org/security/2017/dsa-3965
• file/file commit 35c94dc · Patch
• file/file commit 9611f31 · Patch
• security.gentoo.org/glsa/201710-02

file のその他の脆弱性

• CVE-2022-48554中 5.5File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.
• CVE-2019-18218高 7.8cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer o…
• CVE-2019-8907高 8.8do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application …
• CVE-2019-8906中 4.4do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
• CVE-2019-8905中 4.4do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerabilit…