PT-2021-9016 · Autotrace +5 · Autotrace +5

Name of the Vulnerable Software and Affected Versions: autotrace version 0.31.1 Description: A bitmap double free issue in the main.c file of autotrace allows attackers to cause an unspecified impact via a malformed bitmap image. This issue may occur after a use-after-free error. Recommendations:...

CVE-2019-19005: Double Free

A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image. This may occur after the use-after-free in CVE-2017-9182...

Arbitrary Code Execution

autotrace is vulnerable to arbitrary code execution. The vulnerability exists as integer underflow could occur in the inputbmpreader function in input-bmp.c by providing a small value in the biSize field in the header of a BMP file...

ImageMagick, autotrace, emacs, inkscape security update

CentOS Errata and Security Advisory CESA-2020:1180 An update for ImageMagick, autotrace, emacs, and inkscape is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base...

ImageMagick security, bug fix, and enhancement update

autotrace 0.31.1-38 - Resolves: 1765205 rebuild against new IM emacs 1:24.3-23 - Resolves: 1765208 rebuild against new IM ImageMagick 6.9.10.68-3 - Fixing freeze when svg file contains class='' 6.9.10.68-2 - Fixed ghostscript fonts, fixed multilib conflicts 6.9.10.68-1 - Rebase to 6.9.10.68...

CVE-2017-9156

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the pnmloadascii function in input-pnm.c:303:12...

Debian: Security Advisory (DLA-979)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for autotrace FEDORA-2017-3a568adb31

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 25 : 1:emacs / ImageMagick / WindowMaker / autotrace / converseen / etc (2017-3a568adb31)

Many security fixes, bug fixes, and other changes from the previous version 6.9.3.0. See the 6.9 branch ChangeLog. Dependent packages are mostly straight rebuilds, a couple also include bugfix version updates. ---- rhbz1490649 - emacs-25.3 is available rhbz1490410 - unsafe enriched mode...

Fedora Update for autotrace FEDORA-2017-8f27031c8f

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 25 Update: autotrace-0.31.1-49.fc25

AutoTrace is a program for converting bitmaps to vector graphics. Supported input formats include BMP, TGA, PNM, PPM, and any format supported by ImageMagick, whereas output can be produced in Postscript, SVG, xfig, SWF, and others...

[SECURITY] Fedora 26 Update: autotrace-0.31.1-49.fc26

AutoTrace is a program for converting bitmaps to vector graphics. Supported input formats include BMP, TGA, PNM, PPM, and any format supported by ImageMagick, whereas output can be produced in Postscript, SVG, xfig, SWF, and others...

Fedora 26 : 1:emacs / ImageMagick / WindowMaker / autotrace / converseen / etc (2017-8f27031c8f)

Many security fixes, bug fixes, and other changes from the previous version 6.9.3.0. See the 6.9 branch ChangeLog. Dependent packages are mostly straight rebuilds, a couple also include bugfix version updates. Note that Tenable Network Security has extracted the preceding description block direct...

GLSA-201708-09 : AutoTrace: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201708-09 AutoTrace: Multiple vulnerabilities Heap-based buffer overflows have been discovered in the pstoeditsuffixtableinit and pnmloadrawpbm functions of AutoTrace. Impact : Remote attackers, by enticing a user to process a...

AutoTrace: Multiple vulnerabilities

Background AutoTrace converts bitmap to vector graphics. Description Heap-based buffer overflows have been discovered in the pstoeditsuffixtableinit and pnmloadrawpbm functions of AutoTrace. Impact Remote attackers, by enticing a user to process a crafted bmp image file, could cause a Denial of...

Security fix for the ALT Linux 8 package autotrace version 0.31.1-alt7.M80P.1

0.31.1-alt7.M80P.1 built July 25, 2017 Anton Farygin in task 185817 --- July 25, 2017 Anton Farygin - fixed CVE-2016-7392...

AutoTrace Denial of Service Vulnerability (CNVD-2017-11830)

AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A denial of service vulnerability exists in the libautotrace.a file in AutoTrace version 0.31.1. A remote attacker can exploit this vulnerability to cause a denial of service invalid read and SEGV...

AutoTrace Buffer Overflow Vulnerability

AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A buffer overflow vulnerability exists in input-bmp.c:309:7 of libautotrace.a in AutoTrace version 0.31.1. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...

AutoTrace Denial of Service Vulnerability (CNVD-2017-08535)

AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A denial of service vulnerability exists in the input-tga.c:508:18 of the libautotrace.a file in AutoTrace version 0.31.1. An attacker can exploit this vulnerability to cause a denial of service...

AutoTrace Denial of Service Vulnerability (CNVD-2017-08528)

AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A denial of service vulnerability exists in autotrace.c:191:2 in the libautotrace.a file in AutoTrace version 0.31.1. An attacker can exploit this vulnerability to cause a denial of service...