PT-2017-3903 · Graphicsmagick+2 · Graphicsmagick+2
Bob Friesenhahn
·
Publicado
2017-10-01
·
Atualizado
2020-01-08
·
CVE-2017-14997
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
GraphicsMagick version 1.3.26
Description
The issue is related to an integer underflow in the
ReadPICTImage function of the GraphicsMagick library, which can lead to excessive memory allocation. This can be exploited by a remote attacker to cause a denial of service.Recommendations
For GraphicsMagick version 1.3.26, consider restricting the use of the
ReadPICTImage function in the coders/pict.c file until a patch is available. As a temporary workaround, avoid using this function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.DoS
Integer Underflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Graphicsmagick
Suse
Ubuntu