Heap overflow

2018-05-3013:29:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.7%

JSON

The mobi_decompress_lz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution (heap-based buffer overflow) via a crafted mobi file.

CPENameOperatorVersion
libmobieq0.3

CPE	Name	Operator	Version
	libmobi	eq	0.3

References

seclists.org/fulldisclosure/2018/May/48