NetSight
IP …
high8.8Public exploit code

CVE-2017-16352

GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage() …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage() function of the magick/describe.c file. One possible way to trigger the vulnerability is to run the identify command on a specially crafted MIFF format file with the verbose flag.

Affected products

VendorProductAffected versions
GraphicsmagickGraphicsmagick
Version 1.3.26
DebianDebian Linux
Versions 7.0, 8.0, 9.0

Weakness classification

CWE-119

References