Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-10976

Опубликовано: 06 июл. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5
CVSS3: 7.5

Описание

When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead to a heap-based buffer over-read in the readBlock() function in lib/ttf.c.

РелизСтатусПримечание
devel

not-affected

code not built
esm-apps/xenial

not-affected

code not built
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [code not built]]
precise/esm

DNE

trusty

not-affected

code not built
trusty/esm

DNE

trusty was not-affected [code not built]
upstream

not-affected

code not built
vivid/ubuntu-core

DNE

xenial

not-affected

code not built
yakkety

not-affected

code not built

Показывать по

EPSS

Процентиль: 56%
0.00334
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
больше 8 лет назад

When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead to a heap-based buffer over-read in the readBlock() function in lib/ttf.c.

CVSS3: 7.5
debian
больше 8 лет назад

When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead t ...

CVSS3: 7.5
github
больше 3 лет назад

When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead to a heap-based buffer over-read in the readBlock() function in lib/ttf.c.

EPSS

Процентиль: 56%
0.00334
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Уязвимость CVE-2017-10976