CVE-2018-15160

The libesedbcatalogdefinitionread function in libesedbcatalogdefinition.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments...

CVE-2018-15160

CVE-2018-15160 affects the libesedb project: the vulnerability is in the function libesedb_catalog_definition_read in libesedb_catalog_definition.c , which may cause a heap-based buffer over-read when processing a crafted esedb file. Affected versions are stated as before 2018-04-01. The vendor d...