Debian Icoutils vulnerabilities

3 vulnerabilities

Known vulnerabilities in Debian Icoutils, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2017-5333canonicalubuntu_linux+13
EPSS score
2.22%
Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) or execute arbitrary code via a crafted executable file.7.8CVE-2017-5331canonicalubuntu_linux+7
EPSS score
0.46%
Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable.7.8CVE-2017-5332canonicalubuntu_linux+13
EPSS score
2.11%
The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable.