CVE-2017-5333 on Ubuntu 18.04 LTS (bionic) - medium.
Description:
Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) or execute arbitrary code via a crafted executable file.