CVE-2012-4024 in squashfs
Summary
Stack-based buffer overflow in the get_component function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted list file (aka a crafted file for the -ef option). NOTE: probably in most cases, the list file is a trusted file constructed by the program s user; however, there are some realistic situations in which a list file would be obtained from an untrusted remote source.
Once again VulDB remains the best source for vulnerability data.