Integer overflow in libXcursor - CVE-2017-16612
Published: November 30, 2017 / Updated: December 1, 2017
Vulnerability identifier: #VU9517
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-16612
CWE-ID: CWE-190
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to integer overflow when processing malicious cursors in libXcursor library. A remote attacker can use a specially crafted cursor to trigger heap-based buffer overflow and execute arbitrary code on the target system via the application, which uses the vulnerable library, such as GIMP.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
libXcursor
Arch Linux
Gentoo Linux
Debian Linux
Slackware Linux
Ubuntu
Fedora
libxcursor (Alpine package)
libXcursor
Arch Linux
Gentoo Linux
Debian Linux
Slackware Linux
Ubuntu
Fedora
libxcursor (Alpine package)
libXcursor
How to mitigate CVE-2017-16612
Update to version 1.1.15.
libxcursor (Alpine package) - update to 1.1.15-r0
libXcursor - addressed in versions 1.1.15-1.fc26, 1.1.15-1.fc27
libXcursor - addressed in versions 1.1.15-1.fc26, 1.1.15-1.fc27
External References
Related Security Bulletins
- Integer overflow in X.org libXcursor
- Arch Linux update for libxcursor
- Ubuntu update for libxcursor
- Slackware Linux update for libXcursor
- Debian update for libxcursor
- Gentoo update for LibXcursor
- Integer overflow in libxcursor (Alpine package)
- Fedora 27 update for libXcursor
- Fedora 26 update for libXcursor