Debian Security Advisory
DSA-3756-1 icoutils -- security update
- Date Reported:
- 09 Jan 2017
- Affected Packages:
- icoutils
- Vulnerable:
- Yes
- Security database references:
- In Mitre's CVE dictionary: CVE-2017-5208.
- More information:
-
Choongwoo Han discovered that a programming error in the wrestool tool of the icoutils suite allows denial of service or the execution of arbitrary code if a malformed binary is parsed.
For the stable distribution (jessie), this problem has been fixed in version 0.31.0-2+deb8u1.
For the unstable distribution (sid), this problem has been fixed in version 0.31.0-4.
We recommend that you upgrade your icoutils packages.