NetSight
IP …
high7.8

CVE-2017-5333

Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 allows local users to cause a denial of s…

Impact

Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) or execute arbitrary code via a crafted executable file.

Affected products

VendorProductAffected versions
Icoutils ProjectIcoutils
before 0.31.1
RedhatEnterprise Linux
Version 7.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 7.3, 7.4, 7.6, 7.7
RedhatEnterprise Linux Server Eus
Versions 7.3, 7.4, 7.5, 7.6, 7.7
RedhatEnterprise Linux Server Tus
Versions 7.3, 7.6, 7.7
RedhatEnterprise Linux Workstation
Version 7.0
CanonicalUbuntu Linux
Version 12.04
DebianDebian Linux
Versions 8.0, 9.0, 10.0
OpensuseLeap
Versions 42.1, 42.2
OpensuseOpensuse
Version 13.2

Weakness classification

CWE-190

References