CVE-2018-12098

The liblnk_data_block_read function in liblnk_data_block.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure (heap-based…

published June 19, 2018

CVSS
—
EPSS
1%
Percentile
47.8
In the wild
Unconfirmed
What it is

The liblnk_data_block_read function in liblnk_data_block.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00596 · 47.8th percentile
Published
2018-06-19T21:00Z
EPSS history
Timeline
  • 19 JUN 21:00Z
    The liblnk_data_block_read function in liblnk_data_block.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure (heap-based…
    cvelistv5