CVE-2017-12921

Опубликовано: 28 авг. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

PFileFlashPixView::GetGlobalInfoProperty in f_fpxvw.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.

Ссылки

http://www.openwall.com/lists/oss-security/2017/08/17/10
Mailing List
Third Party Advisory
https://blogs.gentoo.org/ago/2017/08/09/libfpx-null-pointer-dereference-in-pfileflashpixviewgetglobalinfoproperty-f_fpxvw-cpp/
Third Party Advisory
VDB Entry
http://www.openwall.com/lists/oss-security/2017/08/17/10
Mailing List
Third Party Advisory
https://blogs.gentoo.org/ago/2017/08/09/libfpx-null-pointer-dereference-in-pfileflashpixviewgetglobalinfoproperty-f_fpxvw-cpp/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libfpx_project:libfpx:1.3.1:p6:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.01287

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

GHSA-4xjw-jfqh-jjgh

CVSS3: 6.5

github

больше 4 лет назад

PFileFlashPixView::GetGlobalInfoProperty in f_fpxvw.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.

ALT-PU-2019-2532

CVSS3: 6.5

altlinux

около 7 лет назад

ALT-PU-2019-2532: package `libfpx` update to version 1.3.1-alt1.10

EPSS

Процентиль: 70%

0.01287

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476