Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Probe Fuzzer

#16223of 53,624
16.6Total CVSS
Vulnerabilities · 2
High
2
PT-2018-16917
8.8
2018-01-14
Libtiff · Libtiff · CVE-2018-5360
**Name of the Vulnerable Software and Affected Versions** LibTIFF versions prior to 4.0.6 GraphicsMagick version 1.3.27 **Description** The issue is related to the mishandling of TIFF files, specifically a heap-based buffer over-read in the `ReadTIFFImage` function in `coders/tiff.c`. **Recommendations** For LibTIFF versions prior to 4.0.6, update to version 4.0.6 or later. For GraphicsMagick version 1.3.27, consider disabling the `ReadTIFFImage` function in `coders/tiff.c` until a patch is available.
PT-2018-3224
7.8
2018-01-13
Graphicsmagick · Graphicsmagick · CVE-2018-5685
**Name of the Vulnerable Software and Affected Versions** GraphicsMagick version 1.3.27 **Description** The issue is related to an infinite loop in the `ReadBMPImage` function, which can cause an application hang. This can be exploited by remote attackers to cause a denial of service via a crafted image file with a specific bit-field mask value. The vulnerability can be leveraged using a specially created file. **Recommendations** For GraphicsMagick version 1.3.27, consider disabling the `ReadBMPImage` function as a temporary workaround until a patch is available. Restrict access to image files that could potentially exploit this issue to minimize the risk of denial of service.