An issue was discovered in icoutils 0.31.1. An out-of-bounds read leading to a buffer overflow was observed in the "simple_vec" function in the "extract.c" source file. This affects icotool.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4695-1 advisory.

  - Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a     denial of service (memory corruption) via a crafted executable, which triggers a denial of service     (application crash) or the possibility of execution of arbitrary code. (CVE-2017-5208)

  - Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows     local users to cause a denial of service (process crash) and execute arbitrary code via a crafted     executable. (CVE-2017-5331)

  - The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access     unallocated memory, which allows local users to cause a denial of service (process crash) and execute     arbitrary code via a crafted executable. (CVE-2017-5332)

  - Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils     before 0.31.1 allows local users to cause a denial of service (process crash) or execute arbitrary code     via a crafted executable file. (CVE-2017-5333)

  - An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the decode_ne_resource_id     function in the restable.c source file. This is happening because the len parameter for memcpy is not     checked for size and thus becomes a negative integer in the process, resulting in a failed memcpy. This     affects wrestool. (CVE-2017-6009)

  - An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the extract_icons function     in the extract.c source file. This issue can be triggered by processing a corrupted ico file and will     result in an icotool crash. (CVE-2017-6010)

  - An issue was discovered in icoutils 0.31.1. An out-of-bounds read leading to a buffer overflow was     observed in the simple_vec function in the extract.c source file. This affects icotool.
    (CVE-2017-6011)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201801-12 (icoutils: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in icoutils. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to process a specially crafted       file, possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update for icoutils fixes the following issues :

  - CVE-2017-6009: Buffer Overflows in wrestool     (bsc#1025703)

  - CVE-2017-6010, CVE-2017-6011: out-of-bounds read leading     to a buffer overflow in the 'simple_vec' function     (bsc#1025700)

Security fix for CVE-2017-6009, CVE-2017-6010, CVE-2017-6011.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for icoutils is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The icoutils are a set of programs for extracting and converting images in Microsoft Windows icon and cursor files. These files usually have the extension .ico or .cur, but they can also be embedded in executables or libraries.

Security Fix(es) :

* Multiple vulnerabilities were found in icoutils, in the wrestool program. An attacker could create a crafted executable that, when read by wrestool, could result in memory corruption leading to a crash or potential code execution. (CVE-2017-5208, CVE-2017-5333, CVE-2017-6009)

* A vulnerability was found in icoutils, in the wrestool program. An attacker could create a crafted executable that, when read by wrestool, could result in failure to allocate memory or an over-large memcpy operation, leading to a crash. (CVE-2017-5332)

* Multiple vulnerabilities were found in icoutils, in the icotool program. An attacker could create a crafted ICO or CUR file that, when read by icotool, could result in memory corruption leading to a crash or potential code execution. (CVE-2017-6010, CVE-2017-6011)

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the icoutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Multiple vulnerabilities were found in icoutils, in the     wrestool program. An attacker could create a crafted     executable that, when read by wrestool, could result in     memory corruption leading to a crash or potential code     execution. (CVE-2017-5208, CVE-2017-5333,     CVE-2017-6009)

  - A vulnerability was found in icoutils, in the wrestool     program. An attacker could create a crafted executable     that, when read by wrestool, could result in failure to     allocate memory or an over-large memcpy operation,     leading to a crash. (CVE-2017-5332)

  - Multiple vulnerabilities were found in icoutils, in the     icotool program. An attacker could create a crafted ICO     or CUR file that, when read by icotool, could result in     memory corruption leading to a crash or potential code     execution. (CVE-2017-6010, CVE-2017-6011)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for icoutils is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The icoutils are a set of programs for extracting and converting images in Microsoft Windows icon and cursor files. These files usually have the extension .ico or .cur, but they can also be embedded in executables or libraries.

Security Fix(es) :

* Multiple vulnerabilities were found in icoutils, in the wrestool program. An attacker could create a crafted executable that, when read by wrestool, could result in memory corruption leading to a crash or potential code execution. (CVE-2017-5208, CVE-2017-5333, CVE-2017-6009)

* A vulnerability was found in icoutils, in the wrestool program. An attacker could create a crafted executable that, when read by wrestool, could result in failure to allocate memory or an over-large memcpy operation, leading to a crash. (CVE-2017-5332)

* Multiple vulnerabilities were found in icoutils, in the icotool program. An attacker could create a crafted ICO or CUR file that, when read by icotool, could result in memory corruption leading to a crash or potential code execution. (CVE-2017-6010, CVE-2017-6011)

Security Fix(es) :

  - Multiple vulnerabilities were found in icoutils, in the     wrestool program. An attacker could create a crafted     executable that, when read by wrestool, could result in     memory corruption leading to a crash or potential code     execution. (CVE-2017-5208, CVE-2017-5333, CVE-2017-6009)

  - A vulnerability was found in icoutils, in the wrestool     program. An attacker could create a crafted executable     that, when read by wrestool, could result in failure to     allocate memory or an over-large memcpy operation,     leading to a crash. (CVE-2017-5332)

  - Multiple vulnerabilities were found in icoutils, in the     icotool program. An attacker could create a crafted ICO     or CUR file that, when read by icotool, could result in     memory corruption leading to a crash or potential code     execution. (CVE-2017-6010, CVE-2017-6011)

From Red Hat Security Advisory 2017:0837 :

An update for icoutils is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The icoutils are a set of programs for extracting and converting images in Microsoft Windows icon and cursor files. These files usually have the extension .ico or .cur, but they can also be embedded in executables or libraries.

Security Fix(es) :

* Multiple vulnerabilities were found in icoutils, in the wrestool program. An attacker could create a crafted executable that, when read by wrestool, could result in memory corruption leading to a crash or potential code execution. (CVE-2017-5208, CVE-2017-5333, CVE-2017-6009)

* A vulnerability was found in icoutils, in the wrestool program. An attacker could create a crafted executable that, when read by wrestool, could result in failure to allocate memory or an over-large memcpy operation, leading to a crash. (CVE-2017-5332)

* Multiple vulnerabilities were found in icoutils, in the icotool program. An attacker could create a crafted ICO or CUR file that, when read by icotool, could result in memory corruption leading to a crash or potential code execution. (CVE-2017-6010, CVE-2017-6011)

Jerzy Kramarz discovered that icoutils incorrectly handled memory when processing certain files. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause icoutils to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Icoutils is a set of programs that deal with MS Windows icons and cursors. Resources such as icons and cursors can be extracted from MS Windows executable and library files with wrestool.

Three vulnerabilities has been found in these tools.

CVE-2017-6009

A buffer overflow was observed in wrestool.

CVE-2017-6010

A buffer overflow was observed in the extract_icons function. This issue can be triggered by processing a corrupted ico file and will result in an icotool crash.

CVE-2017-6011

An out-of-bounds read leading to a buffer overflow was observed icotool.

For Debian 7 'Wheezy', these problems have been fixed in version 0.29.1-5deb7u2.

We recommend that you upgrade your icoutils packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple vulnerabilities were discovered in the icotool and wrestool tools of Icoutils, a set of programs that deal with MS Windows icons and cursors, which may result in denial of service or the execution of arbitrary code if a malformed .ico or .exe file is processed.

ID	Name	Product	Family	Severity
145046	Ubuntu 16.04 LTS : icoutils vulnerabilities (USN-4695-1)	Nessus	Ubuntu Local Security Checks	high
105756	GLSA-201801-12 : icoutils: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
102216	openSUSE Security Update : icoutils (openSUSE-2017-881)	Nessus	SuSE Local Security Checks	medium
101699	Fedora 26 : icoutils (2017-a861eb07ee)	Nessus	Fedora Local Security Checks	medium
101441	Virtuozzo 7 : icoutils (VZLSA-2017-0837)	Nessus	Virtuozzo Local Security Checks	high
100684	EulerOS 2.0 SP1 : icoutils (EulerOS-SA-2017-1089)	Nessus	Huawei Local Security Checks	high
99904	EulerOS 2.0 SP2 : icoutils (EulerOS-SA-2017-1059)	Nessus	Huawei Local Security Checks	high
99040	CentOS 7 : icoutils (CESA-2017:0837)	Nessus	CentOS Local Security Checks	high
97934	Scientific Linux Security Update : icoutils on SL7.x x86_64 (20170322)	Nessus	Scientific Linux Local Security Checks	high
97910	RHEL 7 : icoutils (RHSA-2017:0837)	Nessus	Red Hat Local Security Checks	high
97906	Oracle Linux 7 : icoutils (ELSA-2017-0837)	Nessus	Oracle Linux Local Security Checks	high
97787	Fedora 24 : icoutils (2017-e8460ebed6)	Nessus	Fedora Local Security Checks	medium
97784	Fedora 25 : icoutils (2017-0e9ad12958)	Nessus	Fedora Local Security Checks	medium
97719	Ubuntu 12.04 LTS : icoutils vulnerabilities (USN-3226-1)	Nessus	Ubuntu Local Security Checks	medium
97697	Debian DLA-854-1 : icoutils security update	Nessus	Debian Local Security Checks	medium
97670	Debian DSA-3807-1 : icoutils - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2017-6011

medium

Tenable Plugins

high

high

medium

medium

high

high

high

high

high

high

high

medium

medium

medium

medium

medium