CVE-2017-17503

CVE-2017-17503 affects GraphicsMagick 1.3.26: ReadGRAYImage in coders/gray.c allows a heap-based buffer over-read via a crafted file. Connected advisories (USN-4248-1, Debian DSA-4321-1) document multiple GraphicsMagick flaws and require upgrading to fixed releases (e.g., Debian stretch fix to 1....

CVE-2017-17501

Technical details about CVE-2017-17501 are not provided in the connected documents. Monitor for updates.

CVE-2017-17504

ImageMagick before 7.0.7-12 has a coders/png.c Magickpngreadrawprofile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage...

CVE-2017-17502

GraphicsMagick 1.3.26 contains a vulnerability in ReadCMYKImage (coders/cmyk.c): a heap-based buffer over-read triggered by a crafted file. Impact per the entry includes partial confidentiality, integrity, and availability. The available data do not specify affected platforms/versions beyond Grap...

CVE-2017-17501

WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file...

CVE-2017-17504

ImageMagick before 7.0.7-12 has a coders/png.c Magickpngreadrawprofile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage...

CVE-2017-16365

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the True Type2 Font parsing module. A corrupte...

CVE-2017-16374

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the JPEG 2000 module. An invalid JPEG 2000 inp...

CVE-2017-16363

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the module that handles character codes for...

CVE-2017-16365

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the True Type2 Font parsing module. A corrupte...

CVE-2017-16384

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the exif processing module for a PNG file duri...

Design/Logic Flaw

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the JPEG 2000 module. An invalid JPEG 2000 inp...

Design/Logic Flaw

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the module that handles character codes for...

Design/Logic Flaw

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the exif processing module for a PNG file duri...

Design/Logic Flaw

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the True Type2 Font parsing module. A corrupte...

CVE-2017-16363

CVE-2017-16363 affects Adobe Acrobat and Reader (various tracks/versions listed in the description). It involves a buffer over-read in the module that handles character codes for certain textual representations, causing pointer arithmetic to read outside the buffer and potentially reveal sensitiv...

CVE-2017-16365

Adobe Acrobat/Reader (2017 and earlier, including 2017.x) is affected by CVE-2017-16365 due to a buffer over-read in the True Type2 Font parsing module caused by a corrupted cmap input, which leads to pointer arithmetic outside the buffer. Impact per the entry: attacker can obtain sensitive infor...

CVE-2017-16384

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the exif processing module for a PNG file duri...

CVE-2017-16374

Technical details for CVE-2017-16374 are not provided in the connected OpenVAS entries; they list this CVE among many but contain no product/version/impact specifics. Monitor for updated advisories.

CVE-2017-16384

The CVE-2017-16384 entry describes a buffer over-read in Adobe Acrobat/Reader (affecting 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier) in the exif processing module for PNG files during XPS conversion. The vulnerability arises from in...