tocsin

Debian/libmobi: medium 6.5

libmobi before v0.10 contains a NULL pointer dereference via the component mobi_buffer_getpointer. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted mobi file.

Action: Upgrade libmobi to 0.11+dfsg-1 or later.

Affected

introducedfixedlast affected
00.11+dfsg-1-

Fixed versions

0.11+dfsg-1

Sources

published · modified · JSON