fuseiso: Multiple vulnerabilities

Background FuseISO is a FUSE module to mount ISO filesystem images .iso, .nrg, .bin, .mdf and .img files. Description Multiple vulnerabilities have been discovered in fuseiso. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a...

CVE-2015-8837

Stack-based buffer overflow in the isofsrealreaddir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long pathname in an ISO file...

CVE-2015-8837

CVE-2015-8837 concerns FuseISO’s isofs.c in isofs_real_readdir, where a stack-based buffer overflow can be triggered by a long pathname in an ISO file, potentially leading to denial of service or arbitrary code execution. Related issue CVE-2015-8836 is an integer overflow in isofs_real_read_zf (i...

CVE-2015-8836

CVE-2015-8836 - fuseiso/ISOs : The vulnerability affects the isofs_real_read_zf function in isofs.c (FuseISO 20070708). An integer overflow may occur when processing a large ZF block size in an ISO image, potentially allowing remote attackers to cause a denial of service (application crash) or, p...

CVE-2015-8836

Integer overflow in the isofsrealreadzf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a large ZF block size in an ISO file, leading to a heap-based buffer overflow...