CVE-2018-14347

Mô tả

Tham khảo

• lists.gnu.org/archive/html/bug-libextractor/2018-07/msg00000.html · Exploit
• gnunet.org/bugs/view.php · Exploit
• gnunet.org/git/libextractor.git/commit · Patch
• lists.debian.org/debian-lts-announce/2018/08/msg00025.html · Mailing List
• debian.org/security/2018/dsa-4290 · Third Party Advisory

Lỗ hổng khác của libextractor

• CVE-2019-15531TRUNG BÌNH 6.5GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
• CVE-2018-20431TRUNG BÌNH 6.5GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function process_metadata() in plugins/ole2_extractor.c.
• CVE-2018-20430TRUNG BÌNH 6.5GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function history_extract() in plugins/ole2_extractor.c, related …
• CVE-2018-16430CAO 8.8GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTOR_zip_extract_method() in zip_extractor.c.
• CVE-2018-14346CAO 8.8GNU Libextractor before 1.7 has a stack-based buffer overflow in ec_read_file_func (unzip.c).