suse · CVE-2016-2317

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-2317 severity moderate: SUSE including 11 source package names (GraphicsMagick-1.2.5-4.41.1, GraphicsMagick-1.3.25-1.1, …), 13 product×package rows across 3 product lines (SUSE Linux Enterprise Software Development Kit 11 SP4, SUSE Studio Onsite 1.3, openSUSE Tumbleweed): Fixed 13.

Description:

Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1) TracePoint function in magick/render.c, (2) GetToken function in magick/utility.c, and (3) GetTransformTokens function in coders/svg.c.