Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils prior to 0.31.1 allows local users to cause a denial of service (process crash) or execute arbitrary code via a crafted executable file.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
icoutils project icoutils |
||
redhat enterprise linux server eus 7.7 |
||
redhat enterprise linux server eus 7.4 |
||
redhat enterprise linux desktop 7.0 |
||
redhat enterprise linux server aus 7.4 |
||
redhat enterprise linux server eus 7.6 |
||
redhat enterprise linux server tus 7.3 |
||
redhat enterprise linux server tus 7.7 |
||
redhat enterprise linux workstation 7.0 |
||
redhat enterprise linux server aus 7.3 |
||
redhat enterprise linux server aus 7.6 |
||
redhat enterprise linux 7.0 |
||
redhat enterprise linux server eus 7.3 |
||
redhat enterprise linux server eus 7.5 |
||
redhat enterprise linux server tus 7.6 |
||
redhat enterprise linux server aus 7.7 |
||
canonical ubuntu linux 12.04 |
||
debian debian linux 9.0 |
||
debian debian linux 8.0 |
||
debian debian linux 10.0 |
||
opensuse leap 42.1 |
||
opensuse leap 42.2 |
||
opensuse opensuse 13.2 |