CVE-2017-14441: Integer Overflow
An exploitable code execution vulnerability exists in the ICO image rendering functionality of SDL2image-2.0.2. A specially crafted ICO image can cause an integer overflow, cascading to a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14441?
The severity of CVE-2017-14441 is high with a score of 8.8.
How does the vulnerability in CVE-2017-14441 work?
The vulnerability in CVE-2017-14441 allows an attacker to execute code by exploiting an integer overflow and resulting heap overflow in the ICO image rendering functionality of SDL2_image-2.0.2.
Which software versions are affected by CVE-2017-14441?
The software versions affected by CVE-2017-14441 include libsdl2-image 2.0.2 and sdl-image1.2 1.2.12.
How can I fix CVE-2017-14441?
To fix CVE-2017-14441, update to the latest versions of libsdl2-image or sdl-image1.2 as specified in the Debian security advisories.
Where can I find more information about CVE-2017-14441?
You can find more information about CVE-2017-14441 in the Debian security advisories and the Gentoo security advisory. Links are provided in the references section.