Описание
An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library. A specially crafted XMP file can cause an arbitrary memory overwrite resulting in code execution. An attacker can provide a malicious image to trigger this vulnerability.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 3.17.0+ds1-3 |
| cosmic | not-affected | 3.17.0+ds1-3 |
| devel | not-affected | 3.17.0+ds1-3 |
| esm-apps-legacy/xenial | released | 3.17.0+ds1-2ubuntu0.1 |
| esm-apps/bionic | not-affected | 3.17.0+ds1-3 |
| esm-apps/xenial | released | 3.17.0+ds1-2ubuntu0.1 |
| esm-infra-legacy/trusty | released | 3.15.4-3ubuntu0.1 |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needs-triage |
Показывать по
Ссылки на источники
EPSS
6.8 Medium
CVSS2
7.8 High
CVSS3
Связанные уязвимости
An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library. A specially crafted XMP file can cause an arbitrary memory overwrite resulting in code execution. An attacker can provide a malicious image to trigger this vulnerability.
An exploitable out-of-bounds write vulnerability exists in the XMP ima ...
An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library. A specially crafted XMP file can cause an arbitrary memory overwrite resulting in code execution. An attacker can provide a malicious image to trigger this vulnerability.
EPSS
6.8 Medium
CVSS2
7.8 High
CVSS3