CVE-2017-5332

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2017-01/msg00024.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2017-01/msg00025.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2017-01/msg00026.html · Mailing List
• rhn.redhat.com/errata/RHSA-2017-0837.html · Third Party Advisory
• debian.org/security/2017/dsa-3765 · Third Party Advisory
• openwall.com/lists/oss-security/2017/01/11/3 · Mailing List
• securityfocus.com/bid/95380 · Third Party Advisory
• ubuntu.com/usn/USN-3178-1 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• git.savannah.gnu.org/cgit/icoutils.git/commit · Patch

icoutils のその他の脆弱性

• CVE-2017-5333高 7.8Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 allows local users to …
• CVE-2017-5331高 7.8Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to cause a denial of ser…
• CVE-2017-5208高 8.8Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) …
• CVE-2017-6011中 5.5An issue was discovered in icoutils 0.31.1. An out-of-bounds read leading to a buffer overflow was observed in the "simple_vec" function in …
• CVE-2017-6010中 5.5An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "extract_icons" function in the "extract.c" source file. T…