CVE-2017-17783

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.27a

Description The issue is related to a buffer over-read error in the ReadPALMImage function, located in coders/palm.c, when QuantumDepth is set to 8. This error can be exploited by a remote attacker to execute arbitrary code.

Recommendations For GraphicsMagick version 1.3.27a, consider disabling the ReadPALMImage function in coders/palm.c until a patch is available to prevent potential exploitation. Restrict access to the ReadPALMImage function to minimize the risk of exploitation when QuantumDepth is 8. At the moment, there is no information about a newer version that contains a fix for this vulnerability.