CVE-2017-7875
CriticalSummary
In wallpaper.c in feh before v2.18.3, a malicious client pretending to be the E17 window manager can trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary code, potentially leading to system compromise. Organizations should be aware of the risks associated with unauthorized access to their systems.
Recommendation
It is recommended to update the feh software to version 2.18.3 or later to mitigate this vulnerability. Additionally, monitoring and restricting access to systems can help minimize the risk of attacks.
Original NVD description (English source)
In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free.