SB2018062822 - Multiple vulnerabilities in winehq Wine

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2018062822

SB2018062822 - Multiple vulnerabilities in winehq Wine

Published: June 28, 2018 Updated: August 8, 2020

Security Bulletin ID SB2018062822
CSH Severity
High
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 vulnerabilities.


1) Buffer overflow (CVE-ID: CVE-2018-12932)

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by triggering a large pAlphaBlend->cbBitsSrc value.


2) Out-of-bounds write (CVE-ID: CVE-2018-12933)

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact because the attacker controls the pCreatePen->ihPen array index.


Remediation

Install update from vendor's website.

References