RSS   Podatności dla 'Icoutils'   RSS

2017-08-22
 
CVE-2017-5208

CWE-190
 
 
Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash) or the possibility of execution of arbitrary code.

 
2017-02-16
 
CVE-2017-6011

CWE-125
 
 
An issue was discovered in icoutils 0.31.1. An out-of-bounds read leading to a buffer overflow was observed in the "simple_vec" function in the "extract.c" source file. This affects icotool.

 
 
CVE-2017-6010

CWE-119
 
 
An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "extract_icons" function in the "extract.c" source file. This issue can be triggered by processing a corrupted ico file and will result in an icotool crash.

 
 
CVE-2017-6009

CWE-119
 
 
An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "decode_ne_resource_id" function in the "restable.c" source file. This is happening because the "len" parameter for memcpy is not checked for size and thus becomes a negative integer in the process, resulting in a failed memcpy. This affects wrestool.

 

Copyright 2024, cxsecurity.com

 

Back to Top