rpm package
suse/libgsf&distro=SUSE Linux Enterprise Server 12 SP5-LTSS
pkg:rpm/suse/libgsf&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-42415 | — | < 1.14.40-8.3.1 | 1.14.40-8.3.1 | Oct 3, 2024 | An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing | ||
| CVE-2024-36474 | — | < 1.14.40-8.3.1 | 1.14.40-8.3.1 | Oct 3, 2024 | An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (libgsf) version v1.14.52. A specially crafted file can result in an integer overflow when processing the directory from the file that allows | ||
| CVE-2016-9888 | Med | 5.5 | < 1.14.40-8.3.1 | 1.14.40-8.3.1 | Dec 8, 2016 | An error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null pointer dereference and subsequently cause a crash via a crafted TAR file. |
- CVE-2024-42415Oct 3, 2024affected < 1.14.40-8.3.1fixed 1.14.40-8.3.1
An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing
- CVE-2024-36474Oct 3, 2024affected < 1.14.40-8.3.1fixed 1.14.40-8.3.1
An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (libgsf) version v1.14.52. A specially crafted file can result in an integer overflow when processing the directory from the file that allows
- affected < 1.14.40-8.3.1fixed 1.14.40-8.3.1
An error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null pointer dereference and subsequently cause a crash via a crafted TAR file.