USN-5838-1

Dashboard / Vulnerabilities / USN-5838-1

USN-5838-1

Summary: advancecomp vulnerabilities

Details: It was discovered that AdvanceCOMP did not properly manage memory while performing read operations on MNG file. If a user were tricked into opening a specially crafted MNG file, a remote attacker could possibly use this issue to cause AdvanceCOMP to crash, resulting in a denial of service. (CVE-2022-35014, CVE-2022-35017, CVE-2022-35018, CVE-2022-35019, CVE-2022-35020) It was discovered that AdvanceCOMP did not properly manage memory while performing read operations on ZIP file. If a user were tricked into opening a specially crafted ZIP file, a remote attacker could possibly use this issue to cause AdvanceCOMP to crash, resulting in a denial of service. (CVE-2022-35015, CVE-2022-35016)

References: https://ubuntu.com/security/notices/USN-5838-1, https://ubuntu.com/security/CVE-2022-35014, https://ubuntu.com/security/CVE-2022-35015, https://ubuntu.com/security/CVE-2022-35016, https://ubuntu.com/security/CVE-2022-35017, https://ubuntu.com/security/CVE-2022-35018, https://ubuntu.com/security/CVE-2022-35019, https://ubuntu.com/security/CVE-2022-35020