Non évaluée
An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library...
CVE-2024-42415
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2024-42415 libgsf Corrigé dans: 1.14.47-1+deb11u1
Description d'origine La description telle que publiée par la source (souvent en anglais).
An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Références
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.gnome.org
- web openwall.com
- web lists.debian.org
- web talosintelligence.com
- web talosintelligence.com