CVE:CVE-2018-3839
CNNVD:CNNVD-201804-457
Simple DirectMedia Layer是一个通过OpenGL和Direct3D为音频、键盘、鼠标和图形硬件设备等提供低级访问的跨平台开发库。
Simple DirectMedia Layer SDL2_image-2.0.2版本中的XCF image rendering功能存在安全漏洞。攻击者可借助特制的XCF图像利用该漏洞执行代码（越边界写入）。
solution:Upgrade libsdl sdl_image to a higher version than 2.0.2,and avoid the version 2.0.2; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade starwindsoftware starwind_virtual_san to a higher version than v8:build12533,v8:build12658,v8:build12859,and avoid the version v8:build12533,v8:build12658,v8:build12859