CVE-2017-17440: Null Pointer Dereference
GNU Libextractor 1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted GIF, IT (Impulse Tracker), NSFE, S3M (Scream Tracker 3), SID, or XM (eXtended Module) file, as demonstrated by the EXTRACTORxmextractmethod function in plugins/xmextractor.c.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-17440?
CVE-2017-17440 has a severity rating that indicates it can lead to a denial of service due to a NULL pointer dereference.
How do I fix CVE-2017-17440?
To fix CVE-2017-17440, upgrade to libextractor versions 1:1.8-2+deb10u1 or 1:1.11-2 and later.
Which software is affected by CVE-2017-17440?
CVE-2017-17440 affects GNU Libextractor version 1.6 and potentially any software utilizing this version.
What type of attack does CVE-2017-17440 facilitate?
CVE-2017-17440 facilitates an attack that can cause a denial of service through crafted media files.
What file types can trigger CVE-2017-17440?
CVE-2017-17440 can be triggered by crafted GIF, IT, NSFE, S3M, SID, or XM files.