CVE-2018-12098

Description

The liblnk_data_block_read function in liblnk_data_block.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub

References

http://seclists.org/fulldisclosure/2018/Jun/33

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS