Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSDE714B7D2-39F6-4992-9F48-E6B2F5F949DF
HistoryJun 23, 2018 - 12:00 a.m.

GraphicsMagick -- SVG/Rendering vulnerability

2018-06-2300:00:00
vuxml.freebsd.org
14

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

85.8%

JSON

GraphicsMagick News:

Fix heap write overflow of PrimitiveInfo and PointInfo arrays. This is
another manefestation of CVE-2016-2317, which should finally be fixed
correctly due to active detection/correction of pending overflow rather
than using estimation.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchgraphicsmagick< 1.3.30,1UNKNOWN

Related

prion 2
osv 3
debiancve 2
openvas 11
alpinelinux 1
archlinux 1
nessus 9
cve 2
ubuntucve 2
amazon 1
fedora 3
mageia 1
debian 3
suse 3
prion
prion
Buffer overflow
2017-02-03 15:59:00
Buffer overflow
2017-02-06 17:59:00
osv
osv
CVE-2016-2317
2017-02-03 15:59:00
graphicsmagick - security update
2016-05-21 00:00:00
graphicsmagick - security update
2016-12-24 00:00:00
debiancve
debiancve
CVE-2016-2317
2017-02-03 15:59:00
CVE-2016-7446
2017-02-06 17:59:00
openvas
openvas
GraphicsMagick 'SVG File Parsing' Denial of Service Vulnerability - 02 - Windows
2017-02-07 00:00:00
Amazon Linux: Security Advisory (ALAS-2016-717)
2016-10-26 00:00:00
Fedora Update for GraphicsMagick FEDORA-2016-0d90ead5d7
2016-06-19 00:00:00
alpinelinux
alpinelinux
CVE-2016-2317
2017-02-03 15:59:00
archlinux
archlinux
graphicsmagick: multiple issues
2016-09-09 00:00:00
nessus
nessus
FreeBSD : GraphicsMagick -- SVG/Rendering vulnerability (e714b7d2-39f6-4992-9f48-e6b2f5f949df)
2018-08-13 00:00:00
Fedora 24 : GraphicsMagick (2016-0d90ead5d7)
2016-07-14 00:00:00
Fedora 22 : GraphicsMagick (2016-40ccaff4d1)
2016-07-14 00:00:00
cve
cve
CVE-2016-2317
2017-02-03 15:59:00
CVE-2016-7446
2017-02-06 17:59:00
ubuntucve
ubuntucve
CVE-2016-2317
2017-02-03 00:00:00
CVE-2016-7446
2017-02-06 00:00:00
amazon
amazon
Important: GraphicsMagick
2016-06-22 15:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: GraphicsMagick-1.3.24-1.fc22
2016-06-19 07:19:42
[SECURITY] Fedora 23 Update: GraphicsMagick-1.3.24-1.fc23
2016-06-19 07:29:29
[SECURITY] Fedora 24 Update: GraphicsMagick-1.3.24-1.fc24
2016-06-18 19:49:22
mageia
mageia
Updated graphicsmagick packages fix security vulnerability
2016-07-14 23:33:59
debian
debian
[SECURITY] [DLA 484-1] graphicsmagick security update
2016-05-21 18:51:57
[SECURITY] [DSA 3746-1] graphicsmagick security update
2016-12-24 22:03:28
[SECURITY] [DSA 3746-1] graphicsmagick security update
2016-12-24 22:03:28
suse
suse
Security update for GraphicsMagick (important)
2016-08-15 15:11:03
Security update for GraphicsMagick (important)
2016-07-11 16:19:50
Security update for GraphicsMagick (important)
2016-07-01 17:07:58

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

85.8%

JSON
Related for E714B7D2-39F6-4992-9F48-E6B2F5F949DF
prion2osv3debiancve2openvas11alpinelinux1archlinux1nessus9cve2ubuntucve2amazon1fedora3mageia1debian3suse3