Summary
It was discovered that feh incorrectly handled certain IPC messages from a
client pretending to be the Enlightenment window manager, leading to an
integer overflow. An attacker could possibly use this issue to cause feh to
crash, resulting in a denial of service, or possibly execute arbitrary
code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | feh | 2.14-1ubuntu0.1~esm1 |
Vulnerabilities 1
-
Unscored —
In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to tr…
References
-
report
https://ubuntu.com/security/CVE-2017-7875