CVE-2017-17502

ReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has a magick/import.c ImportCMYKQuantumType heap-based buffer over-read via a crafted file...

CVE-2017-17502

GraphicsMagick 1.3.26 contains a vulnerability in ReadCMYKImage (coders/cmyk.c): a heap-based buffer over-read triggered by a crafted file. Impact per the entry includes partial confidentiality, integrity, and availability. The available data do not specify affected platforms/versions beyond Grap...

CVE-2017-17503

CVE-2017-17503 affects GraphicsMagick 1.3.26: ReadGRAYImage in coders/gray.c allows a heap-based buffer over-read via a crafted file. Connected advisories (USN-4248-1, Debian DSA-4321-1) document multiple GraphicsMagick flaws and require upgrading to fixed releases (e.g., Debian stretch fix to 1....

CVE-2017-17501

Technical details about CVE-2017-17501 are not provided in the connected documents. Monitor for updates.

CVE-2017-17504

ImageMagick before 7.0.7-12 has a coders/png.c Magickpngreadrawprofile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage...

CVE-2017-17500

ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file...

CVE-2017-17501

WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file...

CVE-2017-17504

ImageMagick before 7.0.7-12 has a coders/png.c Magickpngreadrawprofile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage...

CVE-2017-16365

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the True Type2 Font parsing module. A corrupte...

CVE-2017-16374

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the JPEG 2000 module. An invalid JPEG 2000 inp...

CVE-2017-16363

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the module that handles character codes for...

CVE-2017-16365

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the True Type2 Font parsing module. A corrupte...

CVE-2017-16384

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the exif processing module for a PNG file duri...

Design/Logic Flaw

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the JPEG 2000 module. An invalid JPEG 2000 inp...

Design/Logic Flaw

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the module that handles character codes for...

Design/Logic Flaw

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the exif processing module for a PNG file duri...

Design/Logic Flaw

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the True Type2 Font parsing module. A corrupte...

CVE-2017-16365

Adobe Acrobat/Reader (2017 and earlier, including 2017.x) is affected by CVE-2017-16365 due to a buffer over-read in the True Type2 Font parsing module caused by a corrupted cmap input, which leads to pointer arithmetic outside the buffer. Impact per the entry: attacker can obtain sensitive infor...

CVE-2017-16374

Technical details for CVE-2017-16374 are not provided in the connected OpenVAS entries; they list this CVE among many but contain no product/version/impact specifics. Monitor for updated advisories.

CVE-2017-16363

CVE-2017-16363 affects Adobe Acrobat and Reader (various tracks/versions listed in the description). It involves a buffer over-read in the module that handles character codes for certain textual representations, causing pointer arithmetic to read outside the buffer and potentially reveal sensitiv...