CVE:CVE-2017-5331
CNNVD:CNNVD-201701-256
icoutils是一套用于提取和转换Microsoft Windows图标和光标文件中图像的命令行程序。
icoutils 0.31.1之前版本中的b/wrestool/fileread.c文件的‘check_offset’函数存在输入验证错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。
solution:Upgrade icoutils_project icoutils to a higher version than 0.31.1,and avoid the version (,0.31.1); Upgrade canonical ubuntu_linux to a higher version than 12.04,and avoid the version 12.04; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade opensuse leap to a higher version than 42.1,42.2,and avoid the version 42.1,42.2; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2