CVE-2016-9888

An error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null…

published December 8, 2016

CVSS
—
EPSS
1%
Percentile
70.6
In the wild
Unconfirmed
What it is

An error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null pointer dereference and subsequently cause a crash via a crafted TAR file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01330 · 70.6th percentile
Published
2016-12-08T08:08Z
EPSS history
Timeline
  • 08 DEC 08:08Z
    An error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null…
    cvelistv5