CVE-2018-12096

The liblnk_data_string_get_utf8_string_size function in liblnk_data_string.c in liblnk through 2018-04-19 allows remote attackers to cause an information…

published June 19, 2018

CVSS
—
EPSS
1%
Percentile
47.8
In the wild
Unconfirmed
What it is

The liblnk_data_string_get_utf8_string_size function in liblnk_data_string.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00596 · 47.8th percentile
Published
2018-06-19T21:00Z
EPSS history
Timeline
  • 19 JUN 21:00Z
    The liblnk_data_string_get_utf8_string_size function in liblnk_data_string.c in liblnk through 2018-04-19 allows remote attackers to cause an information…
    cvelistv5