Unrated

An error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited to trigger...

CVE-2016-9888 First seen on SecPulse Dec 8, 2016

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2016-9888 libgsf Fixed in: 1.14.41-1

Original description The description as published by the source.

An error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null pointer dereference and subsequently cause a crash via a crafted TAR file.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch github.com
report secunia.com
report secunia.com
web securityfocus.com
web lists.debian.org

Key facts

Severity: Unrated
Published: Dec 8, 2016
First seen on SecPulse: Dec 8, 2016

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 22:18