The mobi_parse_index_entry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure (heap-based buffer over-read)...

参照URL

• advisory packetstormsecurity.com
• advisory seclists.org