An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "decode_ne_resource_id" function in the "restable.c" source file. This is happening because the "len" parameter for memcpy is not checked for size and thus becomes a negative integer in the process, resulting in a failed memcpy. This affects wrestool.
References
| Link | Resource |
|---|---|
| http://rhn.redhat.com/errata/RHSA-2017-0837.html | Third Party Advisory |
| http://www.debian.org/security/2017/dsa-3807 | Third Party Advisory |
| http://www.securityfocus.com/bid/96292 | Third Party Advisory VDB Entry |
| https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854050 | Exploit Issue Tracking Mailing List Third Party Advisory |
| https://security.gentoo.org/glsa/201801-12 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
No history.
Information
Published : 2017-02-16 11:59
Updated : 2024-02-04 19:11
NVD link : CVE-2017-6009
Mitre link : CVE-2017-6009
CVE.ORG link : CVE-2017-6009
JSON object : View
Products Affected
debian
- debian_linux
redhat
- enterprise_linux_server_tus
- enterprise_linux_server_aus
- enterprise_linux_workstation
- enterprise_linux_server_eus
- enterprise_linux_server
- enterprise_linux_desktop
icoutils_project
- icoutils
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer