high8.8
CVE-2017-5208
Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted execu…
Impact
Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash) or the possibility of execution of arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Icoutils Project | Icoutils | before 0.31.1 |
| Debian | Debian Linux | Version 8.0 |
| Redhat | Enterprise Linux Desktop | Version 7.0 |
| Redhat | Enterprise Linux Server | Version 7.0 |
| Redhat | Enterprise Linux Server Aus | Versions 7.3, 7.4, 7.6 |
| Redhat | Enterprise Linux Server Eus | Versions 7.3, 7.4, 7.5, 7.6 |
| Redhat | Enterprise Linux Server Tus | Versions 7.3, 7.6 |
| Redhat | Enterprise Linux Workstation | Version 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://rhn.redhat.com/errata/RHSA-2017-0837.html
- http://www.debian.org/security/2017/dsa-3756
- http://www.openwall.com/lists/oss-security/2017/01/08/5
- http://www.securityfocus.com/bid/95315
- https://bugzilla.redhat.com/show_bug.cgi?id=1411251
- https://security.gentoo.org/glsa/201801-12
- http://rhn.redhat.com/errata/RHSA-2017-0837.html
- http://www.debian.org/security/2017/dsa-3756
- http://www.openwall.com/lists/oss-security/2017/01/08/5
- http://www.securityfocus.com/bid/95315
- https://bugzilla.redhat.com/show_bug.cgi?id=1411251
- https://security.gentoo.org/glsa/201801-12