PatchTheCVElibfpx vulnerabilities and fixes
Recent CVEs affecting libfpx, with upgrade or downgrade steps. 8 tracked.
libfpx has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-02-09. Highest priority: CVE-2018-6876 (score 49/100).
- CVE-2018-6876 MEDIUM 6.5 DOWNGRADE DOWNGRADE The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other pro
- CVE-2017-12925 MEDIUM 6.5 DOWNGRADE Double free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a den
- CVE-2017-12924 MEDIUM 6.5 DOWNGRADE CDirVector::GetTable in dirfunc.hxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (d
- CVE-2017-12923 MEDIUM 6.5 DOWNGRADE OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of servic
- CVE-2017-12922 MEDIUM 6.5 DOWNGRADE wchar.c in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via
- CVE-2017-12921 MEDIUM 6.5 DOWNGRADE PFileFlashPixView::GetGlobalInfoProperty in f_fpxvw.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a
- CVE-2017-12920 MEDIUM 6.5 DOWNGRADE CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NU
- CVE-2017-12919 MEDIUM 6.5 DOWNGRADE Heap-based buffer overflow in OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attacke
FAQ
How do I fix libfpx vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libfpx being exploited right now?
None of the tracked libfpx CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libfpx CVE should I patch first?
CVE-2018-6876 currently ranks highest (49/100): The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other pro.