PT-2015-7945 · Potrace · Potrace

Publicado 2015-12-16 · Atualizado 2015-12-16

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Potrace versions prior to 1.13

Description The issue is related to critical bugs in the processing of BMP files, which can cause the program to crash or potentially be exploited in other ways by feeding it specially crafted BMP files. The bugs are due to heap overflow, null pointer dereference, and divide by zero issues.

Recommendations For versions prior to 1.13, update to version 1.13 or later to resolve the issue. As a temporary workaround, consider avoiding the use of specially crafted BMP files that could trigger the heap overflow, null pointer dereference, or divide by zero issues until a patch is available.

Identificadores relacionados

MGASA-2015-0474

Produtos afetados

Potrace

Referências · 5

• https://advisories.mageia.org/MGASA-2015-0474.html · Nota de Segurança
• https://bugs.mageia.org/show_bug.cgi?id=17317 · Nota
• https://lists.fedoraproject.org/pipermail/package-announce/2015-December/173441.html · Aviso do Fabricante
• http://potrace.sourceforge.net/NEWS · Nota
• https://osv.dev/vulnerability/MGASA-2015-0474 · Aviso do Fabricante