OSV-2017-134

    Dashboard / Vulnerabilities / OSV-2017-134

    OSV-2017-134

    Published: 15 Jan 2021Last Modified: 13 Apr 2022

    Summary: Heap-buffer-overflow in cdf_file_property_info

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1064 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: cdf_file_property_info cdf_file_summary_info cdf_check_summary_info ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1064

    Affected packages

    Package

    Name: file

    Purl: pkg:generic/file

    Affected ranges

    Type: GIT

    Events:

    Introduced- 17ee4cf670c363de8d2ea4a4897d7a699837873f
    Fixed -19ccebafb7663c422c714e0c67fa4775abf91c43

    Affected versions

    FILE5_29

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2017-134 | CVE-DB