CVE-2017-12923

概要

参考情報

• openwall.com/lists/oss-security/2017/08/17/9 · Mailing List
• blogs.gentoo.org/ago/2017/08/09/libfpx-null-pointer-dereference-in-olestreamwritevt_lpstr-olestrm-cpp · Third Party Advisory

libfpx のその他の脆弱性

• CVE-2018-6876中 6.5The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other products, allows remote attackers…
• CVE-2017-12925中 6.5Double free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service via a crafted f…
• CVE-2017-12924中 6.5CDirVector::GetTable in dirfunc.hxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (divide-by-zero error) via a cra…
• CVE-2017-12922中 6.5wchar.c in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.
• CVE-2017-12921中 6.5PFileFlashPixView::GetGlobalInfoProperty in f_fpxvw.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointe…