Lucene search

CVE-2017-12937

🗓️ 18 Aug 2017 12:00:29Reported by mitreType

The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has a colormap heap-based buffer over-read

Reporter	Title	Published	Views	Family All 33
Veracode	Buffer Over-read	21 Sep 202006:33	–	veracode
Cvelist	CVE-2017-12937	18 Aug 201712:00	–	cvelist
Debian CVE	CVE-2017-12937	18 Aug 201712:29	–	debiancve
Prion	Heap overflow	18 Aug 201712:29	–	prion
AlpineLinux	CVE-2017-12937	18 Aug 201712:29	–	alpinelinux
UbuntuCve	CVE-2017-12937	18 Aug 201700:00	–	ubuntucve
NVD	CVE-2017-12937	18 Aug 201712:29	–	nvd
Mageia	Updated graphicsmagick packages fix security vulnerability	23 Aug 201718:43	–	mageia
OpenVAS	Mageia: Security Advisory (MGASA-2017-0297)	28 Jan 202200:00	–	openvas
OpenVAS	Debian: Security Advisory (DLA-1082-1)	6 Feb 201800:00	–	openvas

Nvd

Node

graphicsmagick graphicsmagickMatch1.3.26

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Source	Link
usn	www.usn.ubuntu.com/4222-1/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/
blogs	www.blogs.gentoo.org/ago/2017/08/05/graphicsmagick-heap-based-buffer-overflow-in-readsunimage-sun-c/
securityfocus	www.securityfocus.com/bid/100442
lists	www.lists.debian.org/debian-lts-announce/2018/06/msg00009.html
hg	www.hg.code.sf.net/p/graphicsmagick/code/rev/95d00d55e978
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/
debian	www.debian.org/security/2018/dsa-4321

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Aug 2017 12:29Current

7.2High risk

Vulners AI Score7.2

CVSS26.8

CVSS38.8

EPSS0.009

CWE-125