An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image 2.0.4. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
References
| Link | Resource |
|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html | Mailing List Third Party Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00014.html | Mailing List Third Party Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html | Mailing List Third Party Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00030.html | Mailing List Third Party Advisory |
| https://talosintelligence.com/vulnerability_reports/TALOS-2019-0842 | Third Party Advisory |
Configurations
History
27 Jun 2022, 17:29
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* cpe:2.3:a:opensuse:backports_sle:15.0:-:*:*:*:*:*:* |
|
| References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00014.html - Mailing List, Third Party Advisory | |
| References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html - Mailing List, Third Party Advisory | |
| References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00030.html - Mailing List, Third Party Advisory | |
| References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html - Mailing List, Third Party Advisory |
Information
Published : 2019-07-31 17:15
Updated : 2024-02-04 20:20
NVD link : CVE-2019-5058
Mitre link : CVE-2019-5058
CVE.ORG link : CVE-2019-5058
JSON object : View
Products Affected
opensuse
- backports_sle
- leap
libsdl
- sdl2_image