Oval Definition:oval:com.redhat.rhsa:def:20170837
Revision Date:2017-03-23Version:636
Title:RHSA-2017:0837: icoutils security update (Important)
Description:The icoutils are a set of programs for extracting and converting images in Microsoft Windows icon and cursor files. These files usually have the extension .ico or .cur, but they can also be embedded in executables or libraries.

Security Fix(es):

  • Multiple vulnerabilities were found in icoutils, in the wrestool program. An attacker could create a crafted executable that, when read by wrestool, could result in memory corruption leading to a crash or potential code execution. (CVE-2017-5208, CVE-2017-5333, CVE-2017-6009)

  • A vulnerability was found in icoutils, in the wrestool program. An attacker could create a crafted executable that, when read by wrestool, could result in failure to allocate memory or an over-large memcpy operation, leading to a crash. (CVE-2017-5332)

  • Multiple vulnerabilities were found in icoutils, in the icotool program. An attacker could create a crafted ICO or CUR file that, when read by icotool, could result in memory corruption leading to a crash or potential code execution. (CVE-2017-6010, CVE-2017-6011)
  • Family:unixClass:patch
    Status:Reference(s):CVE-2017-5208
    CVE-2017-5332
    CVE-2017-5333
    CVE-2017-6009
    CVE-2017-6010
    CVE-2017-6011
    RHSA-2017:0837
    RHSA-2017:0837-00
    RHSA-2017:0837-01
    RHSA-2017:0837-01
    Platform(s):Red Hat Enterprise Linux 7
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 7 is installed
  • AND icoutils is earlier than 0:0.31.3-1.el7_3
  • AND icoutils is signed with Red Hat redhatrelease2 key
  • BACK