Vulnetix
Try Vulnetix Request Demo
CVE-2017-2888 PUBLISHED

An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.

EPSS 2.80% · 86.0th percentile

Risk Scores

EPSS Score
2.80%
86.0th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibsdl20, 2.0.2+dfsg1-6ubuntu2, 2.0.4+dfsg1-2

Timeline

References

Open in Interactive Console →