CVE-2017-6010
Fixed in a distro release EPSS 2%
An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "extract_icons" function in the "extract.c" source file. This issue can be triggered by processing a corrupted ico file and will result in an icotool crash.
Products: icoutils_project icoutils, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | icoutils | 0.31.2-1 |
| Debian 13 | icoutils | 0.31.2-1 |
| Debian 14 | icoutils | 0.31.2-1 |
| Debian 7 | icoutils | 0.29.1-5deb7u2 |
| Debian 8 | icoutils | 0.31.0-2+deb8u3 |
| Red Hat Enterprise Linux 7 | icoutils | 0:0.31.3-1.el7_3 |
| Red Hat Enterprise Linux 7 | icoutils-debuginfo | 0:0.31.3-1.el7_3 |
| Ubuntu 14.04 LTS | icoutils | 0.31.0-2+deb8u3build0.14.04.1 |
| Ubuntu 16.04 LTS | icoutils | 0.31.0-3ubuntu0.1 |