PT-2017-18760 · Autotrace +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue allows remote attackers to cause a denial of service, resulting in an invalid write and SEGV. This is related to the ReadImage function in input-bmp.c. Recommendations: For AutoTrace version...

CVE-2017-9161: Integer Overflow or Wraparound

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in autotrace.c:188:23...

CVE-2017-9163: Improper Restriction of Operations within the Bounds of a Memory Buffer

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in pxl-outline.c:106:54...

CVE-2017-9164: Out-of-bounds Read

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:16:11...

CVE-2017-9172: Improper Restriction of Operations within the Bounds of a Memory Buffer

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:496:29...

CVE-2017-9166: Out-of-bounds Read

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:18:11...

CVE-2017-9167: Improper Restriction of Operations within the Bounds of a Memory Buffer

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:337:25...

CVE-2017-9189: Out-of-bounds Read

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid read and application crash, related to the GETCOLOR function in color.c:16:11...

CVE-2017-9192: Improper Restriction of Operations within the Bounds of a Memory Buffer

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-tga.c:528:7...

CVE-2017-9196: Integer Overflow or Wraparound

libautotrace.a in AutoTrace 0.31.1 has a "negative-size-param" issue in the ReadImage function in input-tga.c:528:7...

CVE-2017-9153: Improper Restriction of Operations within the Bounds of a Memory Buffer

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnmloadrawpbm function in input-pnm.c:391:13...

CVE-2017-9179: Out-of-bounds Read

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid read and SEGV, related to the ReadImage function in input-bmp.c:425:14...

CVE-2017-9157: Out-of-bounds Write

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the pnmloadascii function in input-pnm.c:306:14...

CVE-2017-9151: Improper Restriction of Operations within the Bounds of a Memory Buffer

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnmloadascii function in input-pnm.c:303:12...

CVE-2017-9184: Integer Overflow or Wraparound

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:314:7...

CVE-2017-9169: Improper Restriction of Operations within the Bounds of a Memory Buffer

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:355:25...

CVE-2017-9188: Improper Input Validation

libautotrace.a in AutoTrace 0.31.1 has a "left shift ... cannot be represented in type int" issue in input-bmp.c:516:63...

CVE-2017-9165: Out-of-bounds Read

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:17:11...

CVE-2017-9198: Integer Overflow or Wraparound

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:508:18...

CVE-2017-9180: Out-of-bounds Read

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid read and SEGV, related to the ReadImage function in input-bmp.c:440:14...