Summary
It was discovered that an out-of-bounds write vulnerability existed in the XMP
image handling functionality of the FreeImage library. If a user or automated
system were tricked into opening a specially crafted image, a remote attacker
could overwrite arbitrary memory, resulting in code execution.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | freeimage | 3.15.4-3ubuntu0.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | freeimage | 3.17.0+ds1-2ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage librar…
References
-
report
https://ubuntu.com/security/CVE-2016-5684