CVE-2017-9188

CVE-2017-9188 affects AutoTrace 0.31.1 (libautotrace.a). The vulnerability is a left-shift/biWidth-related integer overflow in input-bmp.c:516:63 that can trigger out-of-bounds behavior in a BMP handling path; CVSS reports high to critical impact (network, no authentication, high impact to confid...

CVE-2017-9170

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:370:25...

CVE-2017-9151

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnmloadascii function in input-pnm.c:303:12...

CVE-2017-9161

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in autotrace.c:188:23...

CVE-2017-9153

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnmloadrawpbm function in input-pnm.c:391:13...

CVE-2017-9200

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:528:63...

CVE-2017-9181

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the ReadImage function in input-bmp.c...

CVE-2017-9172

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:496:29...

CVE-2017-9180

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid read and SEGV, related to the ReadImage function in input-bmp.c:440:14...

CVE-2017-9185

CVE-2017-9185 affects AutoTrace 0.31.1: libautotrace.a contains a bug in input-bmp.c:319:7 described as a “cannot be represented in type int” issue, leading to a buffer/size handling vulnerability. Descriptions and linked sources (NVD, Red Hat/CVE entries, SUSE page, Nessus plugins) converge on t...

CVE-2017-9171

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-bmp.c:492:24...

PT-2017-18775 · None +2 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 ALT Linux affected versions not specified Description: The issue is related to a heap-based buffer over-read in the ReadImage function. This function is located in the input-tga.c file. The estimated number of...

PT-2017-18760 · Autotrace +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue allows remote attackers to cause a denial of service, resulting in an invalid write and SEGV. This is related to the ReadImage function in input-bmp.c. Recommendations: For AutoTrace version...

PT-2017-18764 · Autotrace +2 · Autotrace +2

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue allows remote attackers to cause a denial of service, which is related to a use-after-free and an invalid heap read in the GET COLOR function in color.c. Recommendations: For AutoTrace version...

PT-2017-18774 · Autotrace +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a heap-based buffer overflow in the ReadImage function, located in the input-tga.c file. This overflow occurs at line 528, column 7, of the input-tga.c file in the libautotrace.a...

PT-2017-18748 · Autotrace +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a heap-based buffer over-read in the GET COLOR function, located in color.c. This occurs at line 18, column 11, of the libautotrace.a file in AutoTrace. Recommendations: For...

PT-2017-18756 · None +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue allows remote attackers to cause a denial of service, resulting in an invalid read and SEGV. This is related to the GET COLOR function in color.c. Recommendations: For AutoTrace version 0.31.1,...

PT-2017-18769 · None +2 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 ALT Linux affected versions not specified Description: The issue is related to a "cannot be represented in type int" problem in the input-bmp.c file of AutoTrace. Recommendations: For AutoTrace version 0.31.1, at the...

PT-2017-18736 · None +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue allows remote attackers to cause a denial of service, resulting in an invalid read and SEGV. This is related to the GET COLOR function in color.c. Recommendations: For AutoTrace version 0.31.1, ...

PT-2017-18768 · None +2 · Autotrace +2

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 ALT Linux affected versions not specified Description: The issue is related to a "cannot be represented in type int" problem in the input-bmp.c file at line 326:17 of the libautotrace.a library in AutoTrace. There is...