Summary
Richard Hughes discovered that gcab incorrectly handled certain malformed
cabinet files. If a user or automated system were tricked into opening a
specially crafted cabinet file, a remote attacker could use this issue to
cause gcab to crash, resulting in a denial of service, or possibly execute
arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | gcab | 0.7-1ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash …
References
-
report
https://ubuntu.com/security/CVE-2018-5345