CVE ID:	CVE-2015-0860
Description:	Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debian dpkg 1.16.x before 1.16.17 and 1.17.x before 1.17.26 allows remote attackers to execute arbitrary code via the archive magic version number in an "old-style" Debian binary package, which triggers a stack-based buffer overflow.
Test IDs:	1.3.6.1.4.1.25623.1.0.131164   1.3.6.1.4.1.25623.1.0.871936   1.3.6.1.4.1.25623.1.1.4.2017.1096.1   1.3.6.1.4.1.25623.1.0.703407   1.3.6.1.4.1.25623.1.0.842542   1.3.6.1.4.1.25623.1.0.872026   1.3.6.1.4.1.25623.1.0.871929
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-0860 Debian Security Information: DSA-3407 (Google Search) http://www.debian.org/security/2015/dsa-3407 https://security.gentoo.org/glsa/201612-07 https://blog.fuzzing-project.org/30-Stack-overflows-and-out-of-bounds-read-in-dpkg-Debian.html http://www.ubuntu.com/usn/USN-2820-1