Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-5208

Опубликовано: 08 янв. 2017
Источник: redhat
CVSS3: 8.1

Описание

Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash) or the possibility of execution of arbitrary code.

A vulnerability was found in icoutils, in the wrestool program. An attacker could create a crafted executable that, when read by wrestool, could result in memory corruption leading to a crash or potential code execution.

Дополнительная информация

Статус:

Important
Дефект:
CWE-190->CWE-122
https://bugzilla.redhat.com/show_bug.cgi?id=1411251icoutils: Check_offset overflow on 64-bit systems

8.1 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 8 лет назад

Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash) or the possibility of execution of arbitrary code.

CVSS3: 8.8
nvd
около 8 лет назад

Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash) or the possibility of execution of arbitrary code.

CVSS3: 8.8
debian
около 8 лет назад

Integer overflow in the wrestool program in icoutils before 0.31.1 all ...

CVSS3: 8.8
github
больше 3 лет назад

Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash) or the possibility of execution of arbitrary code.

suse-cvrf
почти 9 лет назад

Security update for icoutils

8.1 High

CVSS3