CVE-2017-16352
High
Description
GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage() function of the magick/describe.c file. One possible way to trigger the vulnerability is to run the identify command on a specially crafted MIFF format file with the verbose flag.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Graphicsmagick
PublishedNov 1, 2017
First seenNov 1, 2017
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| graphicsmagick graphicsmagick | 1.3.26 | — |
| debian debian_linux | 7.0, 8.0, 9.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.