CVE-2017-5331

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
Debian	icoutils	before 0.31.1

References

http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00024.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00025.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00026.htmlMailing List, Third Party Advisory
http://www.debian.org/security/2017/dsa-3765Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/11/3Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/95378Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-3178-1Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1412248Patch, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00024.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00025.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00026.htmlMailing List, Third Party Advisory
http://www.debian.org/security/2017/dsa-3765Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/11/3Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/95378Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-3178-1Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1412248Patch, Third Party Advisory

Timeline

Published: Nov 4, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-53327.8The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local use CVE-2017-53337.8Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 allows local users to CVE-2017-53349.8Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attacker CVE-2017-53357.5The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a d CVE-2017-53369.8Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows r CVE-2017-53379.8Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to CVE-2017-53409.8Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows rem CVE-2017-53419.8The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print().CVE-2017-53429.8In tcpdump before 4.9.0, a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in pr CVE-2017-53449.8An issue was discovered in dotCMS through 3.6.1. The findChildrenByFilter() function which is called by the web accessible path /categoriesS CVE-2017-53458.8SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute a CVE-2017-53467.2SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to exe