Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Probe Fuzzer

#16166de 53,633
16.6CVSS total
Vulnerabilidades · 2
Alta
2
PT-2018-16917
8.8
2018-01-14
Libtiff · Libtiff · CVE-2018-5360
**Name of the Vulnerable Software and Affected Versions** LibTIFF versions prior to 4.0.6 GraphicsMagick version 1.3.27 **Description** The issue is related to the mishandling of TIFF files, specifically a heap-based buffer over-read in the `ReadTIFFImage` function in `coders/tiff.c`. **Recommendations** For LibTIFF versions prior to 4.0.6, update to version 4.0.6 or later. For GraphicsMagick version 1.3.27, consider disabling the `ReadTIFFImage` function in `coders/tiff.c` until a patch is available.
PT-2018-3224
7.8
2018-01-13
Graphicsmagick · Graphicsmagick · CVE-2018-5685
**Name of the Vulnerable Software and Affected Versions** GraphicsMagick version 1.3.27 **Description** The issue is related to an infinite loop in the `ReadBMPImage` function, which can cause an application hang. This can be exploited by remote attackers to cause a denial of service via a crafted image file with a specific bit-field mask value. The vulnerability can be leveraged using a specially created file. **Recommendations** For GraphicsMagick version 1.3.27, consider disabling the `ReadBMPImage` function as a temporary workaround until a patch is available. Restrict access to image files that could potentially exploit this issue to minimize the risk of denial of service.