CVE
CVE-2018-5345
A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash or, potentially, execute arbitrary code via a crafted .cab file.
- Severity
- HIGH
- CVSS
- 7.8
- Published
- Modified
Linked Releases
| Distribution | Release | Status | Evidence |
|---|---|---|---|
| Ubuntu | 16.04.7 amd64 desktop | unknown | source |
| Ubuntu | 16.04.6 i386 desktop | unknown | source |
| Ubuntu | 16.04.7 amd64 server | unknown | source |
| Ubuntu | 16.04.6 i386 server | unknown | source |
References
- https://access.redhat.com/errata/RHSA-2018:0350
- https://bugzilla.redhat.com/show_bug.cgi?id=1527296
- https://usn.ubuntu.com/3546-1/
- https://www.debian.org/security/2018/dsa-4095
- https://access.redhat.com/errata/RHSA-2018:0350
- https://bugzilla.redhat.com/show_bug.cgi?id=1527296
- https://usn.ubuntu.com/3546-1/
- https://www.debian.org/security/2018/dsa-4095