View at Official ubuntu advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2017-2887 medium priority: Ubuntu including 2 source packages (libsdl2-image, sdl-image1.2), 12 status rows across 6 suites (artful, bionic, trusty, upstream, xenial, zesty): released 6, ignored 4, not-affected 2.
An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDL_image 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this vulnerability.