PT-2015-7931 · Filesystem In Userspace · Fuseiso
Publicado
2015-10-25
·
Atualizado
2015-10-25
Nenhuma
Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
Name of the Vulnerable Software and Affected Versions
FuseISO (affected versions not specified)
Description
The issue involves two flaws in FuseISO, a FUSE module for mounting ISO filesystem images. An integer overflow leads to a heap-based buffer overflow when reading certain ZF blocks of particular inodes, potentially causing the fuseiso binary to crash. Additionally, a stack-based buffer overflow occurs when expanding directory portions for absolute path filename entries, which could result in the fuseiso binary crashing or potentially executing arbitrary code with the privileges of the user running the fuseiso executable.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Fuseiso