CVE-2017-11403

Published: Jul 18, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

DSA-4321

vendor-advisory

x_refsource_DEBIAN

https://blogs.gentoo.org/ago/2017/07/12/graphicsmagick-use-after-free-in-closeblob-blob-c/

x_refsource_MISC

[debian-lts-announce] 20180803 [SECURITY] [DLA 1456-1] graphicsmagick security update

mailing-list

x_refsource_MLIST

http://hg.code.sf.net/p/graphicsmagick/code/rev/d0a76868ca37

x_refsource_MISC

USN-4206-1

vendor-advisory

x_refsource_UBUNTU

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2017-11403

Description

Affected Products

References