ID CVE-2017-11642
Summary GraphicsMagick 1.3.26 has a NULL pointer dereference in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11638.
References
Vulnerable Configurations
  • cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*
    cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*
CVSS
Base: 6.8 (as of 18-10-2018 - 10:29)
Impact:
Exploitability:
CWE CWE-476
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:P
refmap via4
bid 100395
confirm http://hg.code.sf.net/p/graphicsmagick/code/rev/29550606d8b9
debian DSA-4321
fedora
  • FEDORA-2019-425a1aa7c9
  • FEDORA-2019-da4c20882c
mlist [debian-lts-announce] 20180803 [SECURITY] [DLA 1456-1] graphicsmagick security update
ubuntu USN-4222-1
Last major update 18-10-2018 - 10:29
Published 26-07-2017 - 08:29
Last modified 18-10-2018 - 10:29
Back to Top