Search CVE reports


Toggle filters

1 – 4 of 4 results


CVE-2024-42415

Medium priority

Some fixes available 4 of 7

An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that...

1 affected package

libgsf

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
libgsf Fixed Fixed Fixed Needs evaluation Needs evaluation
Show less packages

CVE-2024-36474

Medium priority

Some fixes available 4 of 7

An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (libgsf) version v1.14.52. A specially crafted file can result in an integer overflow when...

1 affected package

libgsf

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
libgsf Fixed Fixed Fixed Needs evaluation Needs evaluation
Show less packages

CVE-2016-9888

Low priority
Vulnerable

An error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null pointer dereference and subsequently cause a crash via a crafted TAR file.

1 affected package

libgsf

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
libgsf Not affected Not affected Not affected Not affected Vulnerable
Show less packages

CVE-2006-4514

Unknown priority
Fixed

Heap-based buffer overflow in the ole_info_read_metabat function in Gnome Structured File library (libgsf) 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a...

1 affected package

libgsf

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
libgsf
Show less packages