CVE:CVE-2017-6009
CNNVD:CNNVD-201702-604
icoutils是一套用于提取和转换Microsoft Windows图标和光标文件中图像的命令行程序。
icoutils 0.31.1版本中的restable.c源文件的‘decode_ne_resource_id’函数存在安全漏洞，该漏洞源于在拷贝时，程序没有检查‘len’参数的值。攻击者可利用该漏造成拷贝失败。
solution:Upgrade icoutils_project icoutils to a higher version than 0.31.1,and avoid the version 0.31.1; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.3,7.4,7.6,and avoid the version 7.3,7.4,7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.3,7.4,7.5,7.6,and avoid the version 7.3,7.4,7.5,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.3,7.6,and avoid the version 7.3,7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0