CVE-2017-15600
HighSummary
In GNU Libextractor version 1.4, there is a NULL Pointer Dereference in the EXTRACTOR_nsf_extract_method function of plugins/nsf_extractor.c.
Risk Assessment
Exploitation of this vulnerability may lead to application crashes, potentially affecting service availability within the organization.
Recommendation
It is recommended to update GNU Libextractor to the latest version to mitigate this vulnerability.
Other vulnerabilities in GNU Libextractor 1.4
See all- CVE-2017-15602High
In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTOR_nsfe_extract_method function in plugins/nsfe_extractor.c, leading to an infinite loop for a crafted size.
- CVE-2017-15601High
In GNU Libextractor version 1.4, there is a heap-based buffer overflow in the EXTRACTOR_png_extract_method function in plugins/png_extractor.c, related to processiTXt and stndup.
- CVE-2017-15267High
In GNU Libextractor version 1.4, there is a NULL Pointer Dereference in the flac_metadata function in flac_extractor.c.
Original NVD description (English source)
In GNU Libextractor 1.4, there is a NULL Pointer Dereference in the EXTRACTOR_nsf_extract_method function of plugins/nsf_extractor.c.