SB2019021411 - Multiple vulnerabilities in Simple Direct Media Layer

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2019021411

SB2019021411 - Multiple vulnerabilities in Simple Direct Media Layer

Published: February 14, 2019 Updated: March 7, 2023

Security Bulletin ID SB2019021411
Severity
Medium
Patch available
YES
Number of vulnerabilities 20
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

Medium 20% Low 80%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 20 secuirty vulnerabilities.


1) Heap out-of-bounds read (CVE-ID: CVE-2019-7636)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to heap-based buffer over-read condition in the SDL_GetRGB function. A remote attacker can trick the victim into accessing a crafted image file and perform a denial of service attack.


2) Heap out-of-bounds read (CVE-ID: CVE-2019-7635)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to heap-based buffer over-read condition in the Blit1to4 function. A remote attacker can trick the victim into accessing a crafted image file and perform a denial of service attack.


3) Heap out-of-bounds read (CVE-ID: CVE-2019-7573)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to heap-based buffer over-read condition in the InitMS_ADPCM function. A remote attacker can trick the victim into accessing a crafted image file and perform a denial of service attack.


4) Heap out-of-bounds read (CVE-ID: CVE-2019-7572)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to heap-based buffer over-read condition in the IMA_ADPCM_nibble function. A remote attacker can trick the victim into accessing a crafted image file and perform a denial of service attack.


5) Heap out-of-bounds read (CVE-ID: CVE-2019-7577)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to heap-based buffer over-read condition in the SDL_LoadWAV_RW function. A remote attacker can trick the victim into accessing a crafted image file and perform a denial of service attack.


6) Heap out-of-bounds read (CVE-ID: CVE-2019-7638)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to heap-based buffer over-read condition in the Map1toN function. A remote attacker can trick the victim into accessing a crafted image file and perform a denial of service attack.


7) Heap out-of-bounds read (CVE-ID: CVE-2019-7637)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to heap-based buffer over-read condition in the SDL_FillRect function. A remote attacker can trick the victim into accessing a crafted image file and perform a denial of service attack.


8) Heap out-of-bounds read (CVE-ID: CVE-2019-7574)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to heap-based buffer over-read condition in the IMA_ADPCM_decode function. A remote attacker can trick the victim into accessing a crafted image file and perform a denial of service attack.


9) Heap out-of-bounds read (CVE-ID: CVE-2019-7576)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to heap-based buffer over-read condition in the InitMS_ADPCM function. A remote attacker can trick the victim into accessing a crafted image file and perform a denial of service attack.


10) Heap out-of-bounds read (CVE-ID: CVE-2019-7575)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to heap-based buffer over-read condition in the MS_ADPCM_decode function. A remote attacker can trick the victim into accessing a crafted image file and perform a denial of service attack.


11) Heap out-of-bounds read (CVE-ID: CVE-2019-7578)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to heap-based buffer over-read condition in the in the InitlMA_ADPCM function. A remote attacker can trick the victim into accessing a crafted image file and perform a denial of service attack.


12) Buffer overflow (CVE-ID: CVE-2019-12221)

The vulnerability allows a remote attacker to crash the application.

The vulnerability exists due to a boundary error when processing images in the SDL_free_REAL() function at stdlib/SDL_malloc.c. A remote attacker can create a specially crafted image, trick the victim into opening it, trigger memory corruption and perform a denial of service (DoS) attack.


13) Buffer overflow (CVE-ID: CVE-2019-12219)

The vulnerability allows a remote attacker to crash the application.

The vulnerability exists due to a boundary error when processing images in the SDL_SetError_REAL() function in SDL_error.c. A remote attacker can create a specially crafted image, trick the victim into opening it, trigger memory corruption and perform a denial of service (DoS) attack.


14) Out-of-bounds read (CVE-ID: CVE-2019-12222)

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to an out-of-bounds read in libSDL2.a due to an out-of-bounds read in the function SDL_InvalidateMap at video/SDL_pixels.c.


15) Out-of-bounds read (CVE-ID: CVE-2019-12220)

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to an out-of-bounds read in libSDL2.a due to an out-of-bounds read in the SDL function SDL_FreePalette_REAL at video/SDL_pixels.c.


16) NULL pointer dereference (CVE-ID: CVE-2019-12218)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dreference error in SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c. A remote attacker can perform a denial of service (DoS) attack.


17) NULL pointer dereference (CVE-ID: CVE-2019-12217)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dreference error in SDL stdio_read function in file/SDL_rwops.c. A remote attacker can perform a denial of service (DoS) attack.


18) Heap-based buffer overflow (CVE-ID: CVE-2019-12216)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the IMG_LoadPCX_RW() function in IMG_pcx. A remote attacker can trick the victim to open a specially crafted file, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


19) Integer overflow (CVE-ID: CVE-2019-13626)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack on a targeted system.

The vulnerability exists due to an integer overflow in the "IMA_ADPCM_decode()" function in the "audio/SDL_wave.c" file. A remote attacker can trick a victim to open a specially crafted file, trigger a heap-based buffer over-read condition in the "Fill_IMA_ADPCM_block" function and perform a DoS attack.

20) Out-of-bounds read (CVE-ID: CVE-2019-13616)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to heap-based buffer over-read in the "BlitNtoN" function in the "video/SDL_blit_N.c" file when called from the "SDL_SoftBlit" function in the "video/SDL_blit.c" file. A remote attacker can trick a victim to open a specially crafted file and perform a denial of service attack.


Remediation

Install update from vendor's website.

References