Summary
Choongwoo Han discovered that icoutils incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service
or execute arbitrary code. (CVE-2017-5208)
It was discovered that icoutils incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service
or execute arbitrary code. (CVE-2017-5331, CVE-2017-5332, CVE-2017-5333)
Jerzy Kramarz discovered that icoutils incorrectly handled certain files.
An attacker could possibly use this issue to cause a crash or execute
arbitrary code. (CVE-2017-6009, CVE-2017-6010)
Jerzy Kramarz discovered that icoutils incorrectly handled certain files.
An attacker could possibly use this issue to expose sensitive information.
(CVE-2017-6011)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | icoutils | 0.31.0-3ubuntu0.1 |
Vulnerabilities 7
-
Unscored —
Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service…
-
Unscored —
Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to …
-
Unscored —
The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, w…
-
Unscored —
Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 a…
-
Unscored —
An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "decode_ne_resource_id" function in t…
-
Unscored —
An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "extract_icons" function in the "extr…
-
Unscored —
An issue was discovered in icoutils 0.31.1. An out-of-bounds read leading to a buffer overflow was observed in the "sim…
References
-
report
https://ubuntu.com/security/CVE-2017-5208
-
report
https://ubuntu.com/security/CVE-2017-5331
-
report
https://ubuntu.com/security/CVE-2017-5332
-
report
https://ubuntu.com/security/CVE-2017-5333
-
report
https://ubuntu.com/security/CVE-2017-6009
-
report
https://ubuntu.com/security/CVE-2017-6010
-
report
https://ubuntu.com/security/CVE-2017-6011