CVE-2017-5849

概要

参考情報

• bugzilla.maptools.org/show_bug.cgi · Exploit
• bugzilla.maptools.org/show_bug.cgi · Exploit
• openwall.com/lists/oss-security/2017/02/02/2 · Mailing List
• securityfocus.com/bid/96011
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AF42A624FXVY3BYBHMAO6F2X7EJYHQE2
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LDK3BDMKIQL2NQ3SJZXPBEN2LSOUSSEE

netpbm のその他の脆弱性

• CVE-2017-2587中 5.5A memory allocation vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to crash.
• CVE-2017-2586中 5.5A null pointer dereference vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to cra…
• CVE-2017-2581高 7.8An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or po…
• CVE-2017-2580高 7.8An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or po…
• CVE-2017-2579高 7.8An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack() function has an insufficient code value chec…