Security Advisory

CVE-2017-5332

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-11-04 20:24:14
Last updated 2024-08-05 14:55:35
Assigner debian
State PUBLISHED

Description

The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable.