description: The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable.
problem types: Other
affected:
{
product: icoutils
vendor: Debian
versions:
status: affected, version: before 0.31.1
}