{"id":"CVE-2017-7875","details":"In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free.","modified":"2026-05-17T11:54:31.775211828Z","published":"2017-04-14T18:59:01.173Z","related":["openSUSE-SU-2024:10751-1"],"database_specific":{},"references":[{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00021.html"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/97689"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201707-08"},{"type":"FIX","url":"https://feh.finalrewind.org/"},{"type":"FIX","url":"https://github.com/derf/feh/commit/f7a547b7ef8fc8ebdeaa4c28515c9d72e592fb6d"}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}