The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-0837 advisory.

    [0.31.3-1]
    - Rebase to upstream version 0.31.3.
    - This version includes multiple security fixes       CVE-2017-5208, CVE-2017-5333, CVE-2017-5332, CVE-2017-6009,       CVE-2017-6010, CVE-2017-6011       resolves: rhbz#1430610

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It was discovered that icoutils incorrectly handled memory when processing certain files. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause icoutils to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the icoutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Multiple vulnerabilities were found in icoutils, in the     wrestool program. An attacker could create a crafted     executable that, when read by wrestool, could result in     memory corruption leading to a crash or potential code     execution. (CVE-2017-5208, CVE-2017-5333,     CVE-2017-6009)

  - A vulnerability was found in icoutils, in the wrestool     program. An attacker could create a crafted executable     that, when read by wrestool, could result in failure to     allocate memory or an over-large memcpy operation,     leading to a crash. (CVE-2017-5332)

  - Multiple vulnerabilities were found in icoutils, in the     icotool program. An attacker could create a crafted ICO     or CUR file that, when read by icotool, could result in     memory corruption leading to a crash or potential code     execution. (CVE-2017-6010, CVE-2017-6011)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for icoutils to version 0.31.1 fixes the following issues :

  - CVE-2017-5208: An integer overflow allows maliciously     crafted files to cause DoS or code execution     (boo#1018756).

  - CVE-2017-5331: Incorrect out of bounds checks in     check_offset allow for DoS or code execution     (boo#1018756).

  - CVE-2017-5332: Missing out of bounds checks in     extract_group_icon_cursor_resource allow for DoS or code     execution (boo#1018756).

  - CVE-2017-5333: Incorrect out of bounds checks in     check_offset allow for DoS or code execution     (boo#1018756).

An update for icoutils is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The icoutils are a set of programs for extracting and converting images in Microsoft Windows icon and cursor files. These files usually have the extension .ico or .cur, but they can also be embedded in executables or libraries.

Security Fix(es) :

* Multiple vulnerabilities were found in icoutils, in the wrestool program. An attacker could create a crafted executable that, when read by wrestool, could result in memory corruption leading to a crash or potential code execution. (CVE-2017-5208, CVE-2017-5333, CVE-2017-6009)

* A vulnerability was found in icoutils, in the wrestool program. An attacker could create a crafted executable that, when read by wrestool, could result in failure to allocate memory or an over-large memcpy operation, leading to a crash. (CVE-2017-5332)

* Multiple vulnerabilities were found in icoutils, in the icotool program. An attacker could create a crafted ICO or CUR file that, when read by icotool, could result in memory corruption leading to a crash or potential code execution. (CVE-2017-6010, CVE-2017-6011)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
97906	Oracle Linux 7 : icoutils (ELSA-2017-0837)	Nessus	Oracle Linux Local Security Checks	2017/3/23	2025/12/29	high
96763	Ubuntu 12.04 LTS : icoutils vulnerabilities (USN-3178-1)	Nessus	Ubuntu Local Security Checks	2017/1/25	2026/1/2	high
100684	EulerOS 2.0 SP1 : icoutils (EulerOS-SA-2017-1089)	Nessus	Huawei Local Security Checks	2017/6/9	2025/12/16	high
96547	openSUSE Security Update : icoutils (openSUSE-2017-104)	Nessus	SuSE Local Security Checks	2017/1/17	2026/1/5	high
99040	CentOS 7 : icoutils (CESA-2017:0837)	Nessus	CentOS Local Security Checks	2017/3/30	2025/12/29	high

检测

插件搜索

high

high

high

high

high