Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2024-28562

Опубликовано: 20 мар. 2024
Источник: debian

Описание

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Imf_2_2::copyIntoFrameBuffer() component when reading images in EXR format.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
freeimageunfixedpackage
freeimageno-dsatrixiepackage
freeimageno-dsabookwormpackage
freeimageno-dsabullseyepackage

Примечания

  • https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909

  • https://sourceforge.net/p/freeimage/bugs/363/

Связанные уязвимости

CVSS3: 6.8
ubuntu
почти 2 года назад

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Imf_2_2::copyIntoFrameBuffer() component when reading images in EXR format.

CVSS3: 6.8
nvd
почти 2 года назад

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Imf_2_2::copyIntoFrameBuffer() component when reading images in EXR format.

CVSS3: 6.8
github
почти 2 года назад

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Imf_2_2::copyIntoFrameBuffer() component when reading images in EXR format.