Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-14440

Опубликовано: 24 апр. 2018
Источник: debian

Описание

An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2_image-2.0.2. A specially crafted ILBM image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libsdl2-imagefixed2.0.3+dfsg1-1package
sdl-image1.2fixed1.2.12-8package

Примечания

  • https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0489

  • https://hg.libsdl.org/SDL_image/rev/bfa08dc02b3c

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 8 лет назад

An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2_image-2.0.2. A specially crafted ILBM image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.

CVSS3: 8.8
nvd
почти 8 лет назад

An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2_image-2.0.2. A specially crafted ILBM image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.

CVSS3: 8.8
github
больше 3 лет назад

An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2_image-2.0.2. A specially crafted ILBM image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.

suse-cvrf
около 7 лет назад

Security update for SDL_image

suse-cvrf
почти 8 лет назад

Security update for SDL2, SDL2_image