critical9.8
CVE-2017-9153
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnm_load_rawpbm function in input-pnm.c:391:13.
Impact
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnm_load_rawpbm function in input-pnm.c:391:13.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Autotrace Project | Autotrace | Version 0.31.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
- https://security.gentoo.org/glsa/201708-09
- https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
- https://security.gentoo.org/glsa/201708-09