Heap-Based Buffer Overflow in GraphicsMagick Affects Multiple Platforms
CVE-2017-17498

8.8HIGH

Key Information:

Vendor

Graphicsmagick

Status
Graphicsmagick
Vendor
CVE Published:
11 December 2017

What is CVE-2017-17498?

The vulnerability within the WritePNMImage function of GraphicsMagick version 1.3.26 allows remote attackers to exploit a crafted file, leading to a heap-based buffer overflow. This overflow can cause the application to crash, resulting in denial of service. The vulnerability presents potential unknown impacts beyond the immediate application crash, underscoring the importance of timely updates and patches.

References

http://www.securityfocus.com/bid/102158
vdb-entryx_refsource_BID
https://www.debian.org/security/2018/dsa-4321
vendor-advisoryx_refsource_DEBIAN
https://lists.debian.org/debian-lts-announce/2018/06/msg0...
mailing-listx_refsource_MLIST

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.