Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Icoutils Project Clear all filters
TI-2017-03376 CVE-2017-5332 · GHSA-q358-9pw8-828w

Memory corruption in Debian icoutils

Priority LOW 38

The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cause a denial of service (process crash) and execute arbitrary code via a…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02112 Published 2019-11-04 Fixed in 0.31.1 CWE-119
TI-2017-03375 CVE-2017-5331 · GHSA-pp7c-cq7m-4vmc

Integer overflow in Debian icoutils

Priority LOW 34

Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0046 Published 2019-11-04 Fixed in 0.31.1 CWE-190
TI-2017-03377 CVE-2017-5333 · GHSA-855f-qr67-w6rp

Integer overflow in Debian icoutils

Priority LOW 38

Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) or execute arbitrary code via a crafte…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02216 Published 2019-11-04 Fixed in 0.31.1 CWE-190
TI-2017-03323 CVE-2017-5208 · GHSA-3v6p-5m88-xqx6

Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote…

Priority MEDIUM 44

Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash)…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03591 Published 2017-08-22 Fixed CWE-190