Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:gnu:libextractor:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

Arbitrary Code Execution in GNU libextractor via Environment Variable Injection

GNU libextractor versions prior to 1.16 are vulnerable to arbitrary code execution due to the insecure handling of the LIBEXTRACTOR_PREFIX environment variable, which can be leveraged by local attackers for privilege escalation.

libextractor privilege-escalation linux vulnerability
1t 1c
low advisory

Stack-Based Buffer Overflow in GNU libextractor

GNU libextractor versions prior to 1.15 contain a stack-based buffer overflow in the process_star_office function that can be triggered by malicious OLE2 stream data to cause application crashes.

libextractor
1t 1c