CVE-2017-11637 - GraphicsMagick 1.3.26 has a NULL pointer dereference in the WritePCLImage() function in coders/pcl.c

CVE-2017-11637

Summary

GraphicsMagick 1.3.26 has a NULL pointer dereference in the WritePCLImage() function in coders/pcl.c during writes of monochrome images.

References

Vulnerable Configurations

cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*
cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

confirm	http://hg.code.sf.net/p/graphicsmagick/code/rev/f3ffc5541257
debian	DSA-4321
mlist	[debian-lts-announce] 20180803 [SECURITY] [DLA 1456-1] graphicsmagick security update
ubuntu	USN-4206-1

Last major update

18-10-2018 - 10:29

Published

26-07-2017 - 08:29

Last modified

18-10-2018 - 10:29