Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:0329-1

Опубликовано: 31 янв. 2018
Источник: suse-cvrf

Описание

Security update for freeimage

This update for freeimage fixes one issues.

This security issue was fixed:

  • CVE-2016-5684: Prevent out-of-bounds write vulnerability in the XMP image handling functionality. A specially crafted XMP file could have caused an arbitrary memory overwrite resulting in code execution (boo#1002621).

Список пакетов

openSUSE Leap 42.3
freeimage-3.17.0-5.1
freeimage-devel-3.17.0-5.1
libfreeimage3-3.17.0-5.1
libfreeimageplus3-3.17.0-5.1

Ссылки

Описание

An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library. A specially crafted XMP file can cause an arbitrary memory overwrite resulting in code execution. An attacker can provide a malicious image to trigger this vulnerability.

Затронутые продукты
openSUSE Leap 42.3:freeimage-3.17.0-5.1
openSUSE Leap 42.3:freeimage-devel-3.17.0-5.1
openSUSE Leap 42.3:libfreeimage3-3.17.0-5.1
openSUSE Leap 42.3:libfreeimageplus3-3.17.0-5.1
Ссылки