high8.8
CVE-2017-8326
libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attacke…
Impact
libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image, related to imagew-bmp.c and imagew-util.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Entropymine | Imageworsener | through 1.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blogs.gentoo.org/ago/2017/04/27/imageworsener-two-left-shift/
- https://github.com/jsummers/imageworsener/commit/a00183107d4b84bc8a714290e824ca9c68dac738
- https://security.gentoo.org/glsa/201706-06
- https://blogs.gentoo.org/ago/2017/04/27/imageworsener-two-left-shift/
- https://github.com/jsummers/imageworsener/commit/a00183107d4b84bc8a714290e824ca9c68dac738
- https://security.gentoo.org/glsa/201706-06