suse · CVE-2017-16352

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-16352 severity moderate: SUSE including 32 source package names (GraphicsMagick-1.2.5-78.44.1, ImageMagick-6.4.3.6-78.40.1, …), 93 product×package rows across 26 product lines (SUSE Linux Enterprise Desktop 12 SP2, SUSE Linux Enterprise Desktop 12 SP3, … (26 product lines)): Fixed 93.

Description:

GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage() function of the magick/describe.c file. One possible way to trigger the vulnerability is to run the identify command on a specially crafted MIFF format file with the verbose flag.