PT-2017-3896 · Graphicsmagick+2 · Graphicsmagick+2
Bob Friesenhahn
·
Publicado
2017-07-22
·
Atualizado
2019-12-02
·
CVE-2017-11636
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
GraphicsMagick version 1.3.26
Description
The issue is related to a heap overflow in the
WriteRGBImage() function, which can be exploited by a remote attacker to cause a denial of service. This occurs when processing multiple frames with non-identical widths.Recommendations
For GraphicsMagick version 1.3.26, consider disabling the
WriteRGBImage() function until a patch is available to prevent potential exploitation. Restrict access to the coders/rgb.c module to minimize the risk of denial of service attacks. Avoid using the WriteRGBImage() function for processing multiple frames with different widths until the issue is resolved.Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Graphicsmagick
Suse
Ubuntu