178 matches found
CVE-2017-5331
CVE-2017-5331 affects icoutils prior to 0.31.1, caused by an overflow/out-of-bounds issue in wrestool’s check_offset logic that can lead to DoS and arbitrary code execution via crafted binaries. Affected component: icoutils (wrestool) with root cause described as an integer/size check failure in ...
CVE-2017-5331
Integer overflow in the checkoffset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to cause a denial of service process crash and execute arbitrary code via a crafted executable...
CVE-2017-5333
The CVE-2017-5333 issue affects icoutils, specifically the wrestool component. A local integer overflow in the extract_group_icon_cursor_resource path can be triggered by parsing crafted executables, leading to memory corruption and potential code execution or a crash. Public advisories (e.g., Re...
CVE-2017-5333
Integer overflow in the extractgroupiconcursorresource function in b/wrestool/extract.c in icoutils before 0.31.1 allows local users to cause a denial of service process crash or execute arbitrary code via a crafted executable file...
CVE-2017-6010
A vulnerability was found in icoutils, in the icotool program. An attacker could create a crafted ICO or CUR file that, when read by icotool, could result in memory corruption leading to a crash or potential code execution...
CVE-2017-5208
A vulnerability was found in icoutils, in the wrestool program. An attacker could create a crafted executable that, when read by wrestool, could result in memory corruption leading to a crash or potential code execution...
Security Bulletin: Vulnerabilities in icoutils affect PowerKVM
Summary PowerKVM is affected by vulnerabilities in icoutils. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-5208 DESCRIPTION: icoutils could allow a local attacker to execute arbitrary code on the system, caused by an integer overflow in the wrestool program. B...
GLSA-201801-12 : icoutils: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201801-12 icoutils: Multiple vulnerabilities Multiple vulnerabilities have been discovered in icoutils. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to process a...
icoutils: Multiple vulnerabilities
Background A set of command-line programs for extracting and converting images in Microsoft WindowsR icon and cursor files. Description Multiple vulnerabilities have been discovered in icoutils. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice ...
Debian: Security Advisory (DLA-854-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DEBIAN-CVE-2017-5208
Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service memory corruption via a crafted executable, which triggers a denial of service application crash or the possibility of execution of arbitrary code...
Integer overflow
Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service memory corruption via a crafted executable, which triggers a denial of service application crash or the possibility of execution of arbitrary code...
CVE-2017-5208
Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service memory corruption via a crafted executable, which triggers a denial of service application crash or the possibility of execution of arbitrary code...
CVE-2017-5208
Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service memory corruption via a crafted executable, which triggers a denial of service application crash or the possibility of execution of arbitrary code...
CVE-2017-5208
CVE-2017-5208 affects the icoutils wrestool tool. An integer overflow when parsing a crafted binary can cause memory corruption, leading to a denial of service or potentially arbitrary code execution. The issue exists in icoutils prior to 0.31.1. Remediation: upgrade to icoutils 0.31.1 or newer (...
openSUSE Security Update : icoutils (openSUSE-2017-881)
This update for icoutils fixes the following issues : - CVE-2017-6009: Buffer Overflows in wrestool bsc1025703 - CVE-2017-6010, CVE-2017-6011: out-of-bounds read leading to a buffer overflow in the 'simplevec' function bsc1025700 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...
Fedora 26 : icoutils (2017-a861eb07ee)
Security fix for CVE-2017-6009, CVE-2017-6010, CVE-2017-6011. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Virtuozzo 7 : icoutils (VZLSA-2017-0837)
An update for icoutils is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
EulerOS 2.0 SP1 : icoutils (EulerOS-SA-2017-1089)
According to the versions of the icoutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple vulnerabilities were found in icoutils, in the wrestool program. An attacker could create a crafted executable that, when read by...
EulerOS 2.0 SP2 : icoutils (EulerOS-SA-2017-1059)
According to the versions of the icoutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple vulnerabilities were found in icoutils, in the wrestool program. An attacker could create a crafted executable that, when read by...