GNU Info is reported prone to a buffer overrun vulnerability. The vulnerability is reported to present itself due to a lack of boundary checks performed on argument data for the (f) follow xref Info command. An attacker may exploit this vulnerability by crafting a malicious Info script that is sufficient to trigger the issue. Although this vulnerability is reported to affect info version 4.7-2.1, other versions might also be affected.
GNU Info is reported prone to a buffer overrun vulnerability. The vulnerability is reported to present itself due to a lack of boundary checks performed on argument data for the (f) follow xref Info command. An attacker may exploit this vulnerability by crafting a malicious Info script that is sufficient to trigger the issue. Although this vulnerability is reported to affect info version 4.7-2.1, other versions might also be affected.