CVE:CVE-2017-2887
CNNVD:CNNVD-201710-277
SDL_Image是用于处理图形文件的开源函数库。
SDL_image 2.0.1版本中的XCF属性处理功能存在缓冲区溢出漏洞。攻击者可借助特制的xcf文件利用该漏洞执行代码。
solution:Upgrade libsdl sdl_image to a higher version than 2.0.1,and avoid the version 2.0.1; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0