[Forgot Password]
Login  Register Subscribe

23631

 
 

115084

 
 

97559

 
 

909

 
 

78730

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2017-16669

Date: (C)2017-11-10   (M)2017-11-17
 
CVSS Score: 7.2Access Vector:
Exploitability Subscore: Access Complexity:
Impact Subscore: Authentication:
 Confidentiality:
 Integrity:
 Availability:











coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to the AcquireCacheNexus function in magick/pixel_cache.c.

Reference:
BID-101795
http://hg.code.sf.net/p/graphicsmagick/code/rev/135bdcb88b8d
http://hg.code.sf.net/p/graphicsmagick/code/rev/1b9e64a8901e
http://hg.code.sf.net/p/graphicsmagick/code/rev/2a21cda3145b
http://hg.code.sf.net/p/graphicsmagick/code/rev/2b7c826d36af
http://hg.code.sf.net/p/graphicsmagick/code/rev/3dc7b4e3779d
http://hg.code.sf.net/p/graphicsmagick/code/rev/75245a215fff
http://hg.code.sf.net/p/graphicsmagick/code/rev/e8086faa52d0
http://hg.code.sf.net/p/graphicsmagick/code/rev/fcd3ed3394f6
https://sourceforge.net/p/graphicsmagick/bugs/450/

© 2013 SecPod Technologies