This update for icoutils to version 0.31.1 fixes the following issues :

  - CVE-2017-5208: An integer overflow allows maliciously     crafted files to cause DoS or code execution     (boo#1018756).

  - CVE-2017-5331: Incorrect out of bounds checks in     check_offset allow for DoS or code execution     (boo#1018756).

  - CVE-2017-5332: Missing out of bounds checks in     extract_group_icon_cursor_resource allow for DoS or code     execution (boo#1018756).

  - CVE-2017-5333: Incorrect out of bounds checks in     check_offset allow for DoS or code execution     (boo#1018756).

This new point release fixes a security vulnerability in wrestool. For further details see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850017

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2017-1531:01 advisory.

    The icoutils are a set of programs for extracting and converting images in     Microsoft Windows icon and cursor files. These files usually have the     extension .ico or .cur, but they can also be embedded in executables or     libraries.
    Security issues fixed with this release:
    CVE-2017-5208
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-5332
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-5333
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-6009     An issue was discovered in icoutils 0.31.1. A buffer overflow was     observed in the decode_ne_resource_id function in the restable.c     source file. This is happening because the len parameter for memcpy     is not checked for size and thus becomes a negative integer in the     process, resulting in a failed memcpy. This affects wrestool.
    CVE-2017-6010     An issue was discovered in icoutils 0.31.1. A buffer overflow was     observed in the extract_icons function in the extract.c source     file. This issue can be triggered by processing a corrupted ico file     and will result in an icotool crash.
    CVE-2017-6011     An issue was discovered in icoutils 0.31.1. An out-of-bounds read     leading to a buffer overflow was observed in the simple_vec function     in the extract.c source file. This affects icotool.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Choongwoo Han reports :

An exploitable crash exists in the wrestool utility on 64-bit systems where the result of subtracting two pointers exceeds the size of int.

Security Fix(es) :

  - Multiple vulnerabilities were found in icoutils, in the     wrestool program. An attacker could create a crafted     executable that, when read by wrestool, could result in     memory corruption leading to a crash or potential code     execution. (CVE-2017-5208, CVE-2017-5333, CVE-2017-6009)

  - A vulnerability was found in icoutils, in the wrestool     program. An attacker could create a crafted executable     that, when read by wrestool, could result in failure to     allocate memory or an over-large memcpy operation,     leading to a crash. (CVE-2017-5332)

  - Multiple vulnerabilities were found in icoutils, in the     icotool program. An attacker could create a crafted ICO     or CUR file that, when read by icotool, could result in     memory corruption leading to a crash or potential code     execution. (CVE-2017-6010, CVE-2017-6011)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
96546	openSUSE Security Update : icoutils (openSUSE-2017-103)	Nessus	SuSE Local Security Checks	2017/1/17	2026/1/5	high
96573	Fedora 24 : icoutils (2017-7c221d6f49)	Nessus	Fedora Local Security Checks	2017/1/18	2026/1/5	high
290077	MiracleLinux 7 : icoutils-0.31.3-1.el7 (AXSA:2017-1531:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
96619	FreeBSD : icoutils -- check_offset overflow on 64-bit systems (57facd35-ddf6-11e6-915d-001b3856973b)	Nessus	FreeBSD Local Security Checks	2017/1/19	2026/1/5	high
97934	Scientific Linux Security Update : icoutils on SL7.x x86_64 (20170322)	Nessus	Scientific Linux Local Security Checks	2017/3/24	2025/12/29	high

检测

插件搜索

high

high

high

high

high