Read the docs
Red Hat Security Advisory

RHSA-2017:0837

icoutils security update

Released 2017-03-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 6 records

TI-2017-03323 CVE-2017-5208 · GHSA-3v6p-5m88-xqx6

Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote…

Priority MEDIUM 44

Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash)…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03591 Published 2017-08-22 Fixed CWE-190
TI-2017-03377 CVE-2017-5333 · GHSA-855f-qr67-w6rp

Integer overflow in Debian icoutils

Priority LOW 38

Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) or execute arbitrary code via a crafte…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02216 Published 2019-11-04 Fixed in 0.31.1 CWE-190
TI-2017-03376 CVE-2017-5332 · GHSA-q358-9pw8-828w

Memory corruption in Debian icoutils

Priority LOW 38

The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cause a denial of service (process crash) and execute arbitrary code via a…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02112 Published 2019-11-04 Fixed in 0.31.1 CWE-119