CVE-2016-6250

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary…

published September 21, 2016

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06251 · 93.5th percentile
Published
2016-09-21T14:00Z
EPSS history
Timeline
  • 21 SEP 14:00Z
    Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary…
    cvelistv5