5 matches found
SUSE CVE-2017-18198
printiso9660recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted iso file...
Ubuntu Update for libcdio vulnerability USN-580-1
Ubuntu Update for Linux kernel vulnerabilities USN-580-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5801.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libcdio vulnerability USN-580-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : libcdio vulnerability (USN-580-1)
Devon Miller discovered that the iso-info and cd-info tools did not properly perform bounds checking. If a user were tricked into using these tools with a crafted iso image, an attacker could cause a denial of service core dump and possibly execute arbitrary code. Note that Tenable Network Securi...
USN-580-1: libcdio vulnerability
Devon Miller discovered that the iso-info and cd-info tools did not properly perform bounds checking. If a user were tricked into using these tools with a crafted iso image, an attacker could cause a denial of service core dump and possibly execute arbitrary code...
GNU libcdio库cd-info/iso-info文件栈溢出漏洞
BUGTRAQ ID: 27131 CVECAN ID: CVE-2007-6613 GNU压缩磁盘输入和控制库(libcdio)是用于访问CD-ROM和CD镜像的函数库。 libcdio库的cd-info.c和iso-info.c文件中的printiso9660recurse函数中存在栈溢出漏洞,本地攻击者可能利用此漏洞提升自己的权限。 如果用户受骗使用该库加载了包含有超长joilet文件名的磁盘或镜像的话,就可能导致拒绝服务(core dump)或执行任意指令。以下是src/iso-info.c的printiso9660recurse函数中的漏洞代码: CDIOLISTFOREACH...