unADF: Remote code execution

2018-04-22T00:00:00
ID GLSA-201804-20
Type gentoo
Reporter Gentoo Foundation
Modified 2018-04-22T00:00:00

Description

Background

An unzip like for .ADF files.

Description

Multiple vulnerabilities were discovered in unADF that can lead to remote code execution. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker, by enticing a user to process a specially crafted file, could execute arbitrary code.

Workaround

There is no known workaround at this time.

Resolution

All unADF users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=app-arch/unadf-0.7.12-r1"