Total vulnerabilities in the database
Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file.
| Software | From | Fixed in |
|---|---|---|
| libraw / libraw | 0.15.0 | 0.15.0.x |
| libraw / libraw | - | 0.15.1.x |
| canonical / ubuntu_linux | 13.04 | 13.04.x |
| opensuse / opensuse | 12.3 | 12.3.x |
| canonical / ubuntu_linux | 12.10 | 12.10.x |
| canonical / ubuntu_linux | 12.04 | 12.04.x |
| opensuse / opensuse | 12.2 | 12.2.x |