Summary
Joonun Jang discovered that AdvanceCOMP incorrectly handled certain
malformed zip files. If a user or automated system were tricked into
processing a specially crafted zip file, a remote attacker could cause
AdvanceCOMP to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | advancecomp | 1.18-1ubuntu0.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | advancecomp | 1.20-1ubuntu0.1 |
Vulnerabilities 1
-
Low 3.3
An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP fi…
References
-
report
https://ubuntu.com/security/CVE-2018-1056