CVE-2017-7875 In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer ov...
CriticalCVSS 9.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/feh(Debian:12) | < 2.18-2 | 2.18-2 |
| debian/feh(Debian:13) | < 2.18-2 | 2.18-2 |
| debian/feh(Debian:14) | < 2.18-2 | 2.18-2 |
| feh project feh | <= 2.18.2 | No fix listed |
References
- Debian Security Tracker CVE-2017-7875 vendor-advisory
- 97689 third-party-advisory vdb-entry
- feh.finalrewind.org patch product
- github.com patch vendor-advisory
- [debian-lts-announce] 20200524 [SECURITY] [DLA 2219-1] feh security update mailing-list
- GLSA-201707-08 vendor-advisory
- bugs.debian.org issue-tracking