Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash)…
Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) or execute arbitrary code via a crafte…
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.02216·Published 2019-11-04·Fixed in 0.31.1CWE-190
The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cause a denial of service (process crash) and execute arbitrary code via a…
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.02112·Published 2019-11-04·Fixed in 0.31.1CWE-119
Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable.
CVSS 3.1HIGH 7.8·Local·Low privileges·No interaction·EPSS 0.0046·Published 2019-11-04·Fixed in 0.31.1CWE-190
THREATIST.IORead the docs