A boundary error within the "foveon_load_camf()" function (dcraw_foveon.c) when initializing a huffman table in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a stack-based buffer overflow.
References
Link | Resource |
---|---|
https://github.com/LibRaw/LibRaw-demosaic-pack-GPL2/commit/194f592e205990ea8fce72b6c571c14350aca716 | Patch Third Party Advisory |
https://secuniaresearch.flexerasoftware.com/advisories/75000/ | Permissions Required Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: flexera
Published: 2017-05-15T18:00:00
Updated: 2017-05-15T18:57:01
Reserved: 2017-03-14T00:00:00
Link: CVE-2017-6890
JSON object: View
NVD Information
Status : Analyzed
Published: 2017-05-15T18:29:00.263
Modified: 2017-05-25T15:38:21.917
Link: CVE-2017-6890
JSON object: View
Redhat Information
No data.
CWE