CVE-2017-5208
Fixed in a distro release EPSS 4%
Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash) or the possibility of execution of arbitrary code.
Products: icoutils_project icoutils, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | icoutils | 0.31.1-1 |
| Debian 12 | icoutils | 0.31.0-4 |
| Debian 13 | icoutils | 0.31.0-4 |
| Debian 14 | icoutils | 0.31.0-4 |
| Debian 7 | icoutils | 0.29.1-5deb7u1 |
| Debian 8 | icoutils | 0.31.0-2+deb8u1 |
| Red Hat Enterprise Linux 7 | icoutils | 0:0.31.3-1.el7_3 |
| Red Hat Enterprise Linux 7 | icoutils-debuginfo | 0:0.31.3-1.el7_3 |
| Ubuntu 14.04 LTS | icoutils | 0.31.0-2+deb8u2build0.14.04.1 |
| Ubuntu 16.04 LTS | icoutils | 0.31.0-3ubuntu0.1 |
| openSUSE Tumbleweed | icoutils | 0.32.3-1.7 |