CVE-2016-9085

Опубликовано: 03 фев. 2017

Источник: debian

Описание

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.

Пакет	Статус	Версия исправления	Релиз	Тип
libwebp	fixed	0.5.1-3		package
libwebp	not-affected		wheezy	package

https://chromium.googlesource.com/webm/libwebp/+/e2affacc35f1df6cc3b1a9fa0ceff5ce2d0cce83
Report: https://bugs.chromium.org/p/webp/issues/detail?id=314 (private)
For libwebp only in examples, but other projects seem to use the gifdec.c
Origin of the file seems to be from libav

CVE-2016-9085

CVSS3: 3.3

ubuntu

около 9 лет назад

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.

CVE-2016-9085

CVSS3: 3.3

redhat

больше 9 лет назад

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.

CVE-2016-9085

CVSS3: 3.3

nvd

около 9 лет назад

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.

GHSA-6p8m-c6x4-m899

CVSS3: 3.3

github

больше 3 лет назад

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.