2 matches found
Remote Code Execution (RCE)
libSDL-1.2.so is vulnerable to remote code execution RCE. A malicious user can pass an ILBM image to the application to cause a heap overflow, crashing the application or causing arbitrary code to be executed...
Remote Code Execution (RCE)
libSDL-1.2.so is vulnerable to remote code execution. The library does not properly check the BytePerPixel variable, allowing a malicious user to pass a crafted ico image to cause an integer overflow that can cause arbitrary code to be executed...