Lucene search
Veracode Vulnerability DatabaseVERACODE:7469HistorySep 12, 2018 - 7:08 a.m.
Remote Code Execution (RCE)
2018-09-1207:08:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.005 Low
EPSS
Percentile
77.0%
libSDL-1.2.so is vulnerable to remote code execution. The library does not properly check the BytePerPixel variable, allowing a malicious user to pass a crafted ico image to cause an integer overflow that can cause arbitrary code to be executed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libsdl-1.2.so | le | 0.11.4 | |
| libsdl-1.2.so | le | 0.11.4 |
Related
debiancve
debiancve
CVE-2017-14441
2018-04-24 19:29:01
ubuntucve
ubuntucve
CVE-2017-14441
2018-04-24 00:00:00
cvelist
cvelist
CVE-2017-14441
2018-03-01 00:00:00
nvd
nvd
CVE-2017-14441
2018-04-24 19:29:01
cve
cve
CVE-2017-14441
2018-04-24 19:29:01
osv
osv
CVE-2017-14441
2018-04-24 19:29:01
sdl-image1.2 - security update
2018-04-06 00:00:00
sdl-image1.2 - security update
2018-04-28 00:00:00
talos
talos
prion
prion
Integer overflow
2018-04-24 19:29:00
debian
debian
[SECURITY] [DLA 1341-1] sdl-image1.2 security update
2018-04-06 22:29:20
[SECURITY] [DSA 4184-1] sdl-image1.2 security update
2018-04-28 19:28:02
[SECURITY] [DSA 4184-1] sdl-image1.2 security update
2018-04-28 19:28:02
nessus
nessus
Debian DLA-1341-1 : sdl-image1.2 security update
2018-04-10 00:00:00
openSUSE Security Update : SDL2 / SDL2_image (openSUSE-2018-280)
2018-03-19 00:00:00
Debian DSA-4184-1 : sdl-image1.2 - security update
2018-04-30 00:00:00
talosblog
talosblog
Vulnerability Spotlight: Simple DirectMedia Layer’s SDL2_Image
2018-03-01 13:21:00
openvas
openvas
openSUSE: Security Advisory for SDL2 (openSUSE-SU-2018:0734-1)
2018-03-19 00:00:00
Debian: Security Advisory (DLA-1341-1)
2018-04-08 00:00:00
Mageia: Security Advisory (MGASA-2018-0276)
2022-01-28 00:00:00
suse
suse
Security update for SDL2, SDL2_image (important)
2018-03-18 15:09:14
mageia
mageia
Updated SDL_image packages fix security vulnerability
2018-06-06 21:15:31
Updated sdl2/mingw-SDL2 packages fix security vulnerabilities
2018-11-18 01:23:26
gentoo
gentoo
SDL2_Image: Multiple vulnerabilities
2019-03-28 00:00:00