CVE-2018-3977
01.11.2018, 15:29
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.Enginsight
| Vendor | Product | Version |
|---|---|---|
| libsdl | sdl_image | 2.0.3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libsdl2-image |
| ||||||||||||||||||||||
| sdl-image1.2 |
|
Common Weakness Enumeration
References