Bug 650888 (CVE-2017-16868)

Summary:	media-gfx/swftools: Denial of Service through integer overflow/NULL pointer deference
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	trivial	CC:	dblaci, maintainer-needed, proxy-maint, treecleaner
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	~3 [noglsa cve]
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	617252, 635208, 637172
Deadline:	2019-04-28

Description GLSAMaker/CVETool Bot gentoo-dev

2018-03-19 14:49:58 UTC

CVE-2017-16868 (https://nvd.nist.gov/vuln/detail/CVE-2017-16868):
  In SWFTools 0.9.2, the wav_convert2mono function in lib/wav.c does not
  properly restrict a multiplication within a malloc call, which allows remote
  attackers to cause a denial of service (integer overflow and NULL pointer
  dereference) via a crafted WAV file.


@Maintainers please let us know when tree is clean.

Thank you

Comment 1 Larry the Git Cow gentoo-dev

2019-03-29 23:53:19 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b1d6b78e63660d748d81395bb01c5c63d553cf37

commit b1d6b78e63660d748d81395bb01c5c63d553cf37
Author:     Aaron Bauman <bman@gentoo.org>
AuthorDate: 2019-03-29 23:49:20 +0000
Commit:     Aaron Bauman <bman@gentoo.org>
CommitDate: 2019-03-29 23:49:20 +0000

    package.mask: Last-rite media-gfx/swftools
    
    * Multiple outstanding security vulnerabilities
    * No upstream releases in years
    * Maintainers have not patched
    
    Bug: https://bugs.gentoo.org/617252
    Bug: https://bugs.gentoo.org/635208
    Bug: https://bugs.gentoo.org/637172
    Bug: https://bugs.gentoo.org/650888
    
    Signed-off-by: Aaron Bauman <bman@gentoo.org>

 profiles/package.mask | 6 ++++++
 1 file changed, 6 insertions(+)

Comment 2 Larry the Git Cow gentoo-dev

2019-04-28 20:03:01 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=32edfe461d949f5b809fefe51e0248c2c27f53b4

commit 32edfe461d949f5b809fefe51e0248c2c27f53b4
Author:     Michał Górny <mgorny@gentoo.org>
AuthorDate: 2019-04-28 20:01:03 +0000
Commit:     Michał Górny <mgorny@gentoo.org>
CommitDate: 2019-04-28 20:02:33 +0000

    media-gfx/swftools: Remove last-rited pkg
    
    Bug: https://bugs.gentoo.org/650888
    Bug: https://bugs.gentoo.org/637172
    Bug: https://bugs.gentoo.org/635208
    Bug: https://bugs.gentoo.org/617252
    Signed-off-by: Michał Górny <mgorny@gentoo.org>

 media-gfx/swftools/Manifest                        |  1 -
 .../swftools/files/swftools-0.9.2-jpeg-9.patch     | 17 -----
 .../swftools/files/swftools-0.9.2_general.patch    | 28 -------
 .../swftools/files/swftools-0.9.2_giflib.patch     | 89 ----------------------
 .../swftools/files/swftools-0.9.2_giflib5.patch    | 26 -------
 .../swftools/files/swftools-0.9.2_nopdf.patch      | 40 ----------
 media-gfx/swftools/metadata.xml                    |  5 --
 media-gfx/swftools/swftools-0.9.2-r1.ebuild        | 48 ------------
 profiles/package.mask                              |  6 --
 9 files changed, 260 deletions(-)