REDHAT-BUG-1492701: Buffer Overflow

Published Sep 18, 2017

Updated

A stack-based buffer overflow was found in findTable() in liblouis. An attacker could create a malicious file that would cause applications that use liblouis (such as Orca) to crash, or potentially execute arbitrary code when opened.

Affected Software

2 affected components

Liblouis Liblouis

Orca Orca

Event History

Sep 18, 2017

Data Sourced

via Red Hat·01:48 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1492701?

The severity of REDHAT-BUG-1492701 is high due to the potential for stack-based buffer overflow that can lead to application crashes or arbitrary code execution.

How do I fix REDHAT-BUG-1492701?

To fix REDHAT-BUG-1492701, update to the latest version of liblouis that includes the patch for the buffer overflow vulnerability.

Which applications are affected by REDHAT-BUG-1492701?

Applications that use liblouis, such as Orca, are affected by REDHAT-BUG-1492701.

Can REDHAT-BUG-1492701 be exploited remotely?

Yes, REDHAT-BUG-1492701 can be exploited remotely if an attacker provides a malicious file that causes the vulnerability to trigger.

What is liblouis in relation to REDHAT-BUG-1492701?

Liblouis is a library for translating text into braille and is the source of the buffer overflow vulnerability identified in REDHAT-BUG-1492701.