CVE-2018-11726 - The mobi_decode_font_resource function in util.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted mobi file

Back Back to CVE browser

HIGH

The mobi_decode_font_resource function in util.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted mobi file

Published Jun 19, 2018

8.8

HIGH

CVSS 3.0

EPSS 2.51%

Description

The mobi_decode_font_resource function in util.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted mobi file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (3)

http://packetstormsecurity.com/files/148114/libmobi-0.3-Information-Disclosure.html
x_refsource_MISCThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2018/Jun/16
mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-3745
Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/148114/libmobi-0.3-Information-Disclosure.html		x_refsource_MISCThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2018/Jun/16		mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-3745		Advisory