Simple DirectMedia Layer Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	101215
Class:	Boundary Condition Error
CVE:	CVE-2017-2887 CVE-2017-2888
Remote:	Yes
Local:	No
Published:	Oct 10 2017 12:00AM
Updated:	Oct 10 2017 12:00AM
Credit:	Yves Younan.
Vulnerable:	Simple DirectMedia Layer Simple DirectMedia Layer 0
Not Vulnerable:

Simple DirectMedia Layer Multiple Buffer Overflow Vulnerabilities

Simple DirectMedia Layer is prone to multiple buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.

An attacker can exploit these issues to execute arbitrary code within the context of the application. Failed exploit attempts will likely cause a denial-of-service condition.

Simple DirectMedia Layer Multiple Buffer Overflow Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Simple DirectMedia Layer Multiple Buffer Overflow Vulnerabilities

Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.

Simple DirectMedia Layer Multiple Buffer Overflow Vulnerabilities

References:

• Vulnerability Spotlight: Arbitrary Code Execution Bugs in Simple DirectMedia La (talosintelligence.com)
  
• Simple DirectMedia Layer Homepage (SDL)