CVE-2016-10722

Description

partclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the FAT superblock, related to the mark_reserved_sectors function. An attacker may be able to execute arbitrary code in the context of the user running the affected application.

Weakness classification

• CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references

• cve@mitre.org — Exploit, Third Party Advisory
• cve@mitre.org — Issue Tracking, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Third Party Advisory