PT-2016-3279

CVE-2016-7996

·

تاريخ النشر

2016-10-07

·

تاريخ التحديث

2024-06-15

الوصف من

CVSS 3.1
9.8
حرجة
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions GraphicsMagick versions 1.3.25 and earlier
Description The issue is related to a heap-based buffer overflow in the WPG format reader, which can be exploited by remote attackers using a colormap with a large number of entries. This may allow an attacker to cause unspecified impact, potentially including denial of service or execution of arbitrary code.
Recommendations For GraphicsMagick versions 1.3.25 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALT-PU-2018-2652
DLA-683-1
DSA-3746-1
MGASA-2016-0337
MGASA-2017-0229
OPENSUSE-SU-2016_3060-1
OPENSUSE-SU-2024:10596-1
SUSE-SU-2016:2667-1
SUSE-SU-2016:2724-1
SUSE-SU-2016:2964-1
SUSE-SU-2017:3435-1
SUSE-SU-2017_3435-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾