Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash) or the possibility of execution of arbitrary code.
CVSS Details
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 22, 2017 |
| Centos_linux | — | Upgrade icoutils-debuginfoUpgrade icoutils | Mar 30, 2017 | Jan 17, 2017 |
| Debian | — | Upgrade icoutils | Mar 31, 2017 | Jan 9, 2017 |
| Freebsd | — | Upgrade icoutils | Jan 19, 2017 | Jan 19, 2017 |
| Gentoo Linux | — | Upgrade media-gfx/icoutils. | Jan 12, 2018 | Aug 22, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade icoutils | Jan 18, 2018 | Aug 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade icoutils | Jan 18, 2018 | Aug 22, 2017 |
| Oracle_linux | — | Upgrade icoutils | Mar 23, 2017 | Jan 8, 2017 |
| Redhat_linux | — | Upgrade icoutils-debuginfoUpgrade icoutils | Mar 26, 2017 | Jan 17, 2017 |
| Suse | — | Upgrade icoutils | Jan 17, 2017 | Jan 17, 2017 |
| Ubuntu | — | Upgrade icoutils | Jan 25, 2017 | Jan 17, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub