QwikSec

Security Database

CVE

CWE

Training

CVE-2017-16352

Published: Nov 1, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage() function of the magick/describe.c file. One possible way to trigger the vulnerability is to run the identify command on a specially crafted MIFF format file with the verbose flag.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_BID

exploit

x_refsource_EXPLOIT-DB

http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=7292230dd185

x_refsource_MISC

vendor-advisory

x_refsource_DEBIAN

[debian-lts-announce] 20180803 [SECURITY] [DLA 1456-1] graphicsmagick security update

mailing-list

x_refsource_MLIST

https://blogs.securiteam.com/index.php/archives/3494

x_refsource_MISC

[debian-lts-announce] 20171103 [SECURITY] [DLA 1159-1] graphicsmagick security update

mailing-list

x_refsource_MLIST

vendor-advisory

x_refsource_UBUNTU

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.