PT-2018-2597 · Libcaca+2 · Libcaca+2
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
libcaca version 0.99.beta19
Description
The issue is related to an integer overflow in the
load image function, located in common-image.c, which can lead to an illegal WRITE memory access, particularly for 4bpp data. This can potentially allow a remote attacker to execute arbitrary code.Recommendations
For libcaca version 0.99.beta19, consider disabling the
load image function until a patch is available to prevent potential exploitation. Restrict access to the common-image.c module to minimize the risk of exploitation. Avoid using the load image function for 4bpp data until the issue is resolved.Exploit
Fix
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Suse
Ubuntu
Libcaca