CVE-2017-12925

概要

参考情報

• openwall.com/lists/oss-security/2017/08/17/14 · Mailing List
• blogs.gentoo.org/ago/2017/08/09/libfpx-double-free-in-dffromlb-docfile-cxx · Third Party Advisory

libfpx のその他の脆弱性

• CVE-2018-6876中 6.5The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other products, allows remote attackers…
• CVE-2017-12924中 6.5CDirVector::GetTable in dirfunc.hxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (divide-by-zero error) via a cra…
• CVE-2017-12923中 6.5OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) v…
• CVE-2017-12922中 6.5wchar.c in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.
• CVE-2017-12921中 6.5PFileFlashPixView::GetGlobalInfoProperty in f_fpxvw.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointe…