CVE-2017-9153

CVE-2017-9153 affects AutoTrace 0.31.1 (libautotrace.a) with a heap-based buffer overflow in pnm_load_rawpbm (input-pnm.c:391:13). This can be triggered by a crafted bitmap image, potentially enabling remote code execution or DoS. Remediation in public advisories recommends upgrading to a newer A...

PT-2017-18765 · Autotrace +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a "cannot be represented in type int" problem in the input-bmp.c file at line 309:7 of the libautotrace.a library in AutoTrace. Recommendations: For AutoTrace version 0.31.1, at th...

PT-2017-18777 · Autotrace +1 · Autotrace +2

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 ALT Linux affected versions not specified Description: The issue is related to a heap-based buffer over-read in the ReadImage function, located in input-tga.c. This function is part of the libautotrace.a library in...

PT-2017-18739 · Autotrace Team +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to the pnm load ascii function in input-pnm.c, which can cause a denial of service due to an invalid write and SEGV. This is a result of a problem in the libautotrace.a library...

PT-2017-18755 · Autotrace +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a heap-based buffer overflow in the ReadImage function, located in the input-bmp.c file. This overflow occurs at line 497, column 29, and is associated with the libautotrace.a...

PT-2017-18770 · Martin Weber +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a "left shift" problem that cannot be represented in type int, located in input-bmp.c at line 516, column 63. This is a problem in the libautotrace.a library of AutoTrace...

PT-2017-18767 · None +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a "cannot be represented in type int" problem in the input-bmp.c file at line 319:7 of the libautotrace.a library in AutoTrace. Recommendations: For AutoTrace version 0.31.1, at th...

PT-2017-18752 · Autotrace +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a heap-based buffer overflow in the ReadImage function, located in the input-bmp.c file. This overflow occurs at line 370, column 25, and is associated with the libautotrace.a...

PT-2017-18778 · Autotrace +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a "negative-size-param" problem in the ReadImage function, located in input-tga.c. This function is part of the libautotrace.a library in AutoTrace. Recommendations: For AutoTrace...

PT-2017-18746 · Autotrace Team +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a heap-based buffer over-read in the GET COLOR function, located in color.c. This function is part of the libautotrace.a library in AutoTrace. Recommendations: For AutoTrace versio...