Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-15277

Опубликовано: 12 окт. 2017
Источник: nvd
CVSS3: 6.5
CVSS2: 4.3
EPSS Средний

Описание

ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*

EPSS

Процентиль: 98%
0.50442
Средний

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 8 лет назад

ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.

CVSS3: 3.3
redhat
больше 8 лет назад

ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.

CVSS3: 6.5
debian
больше 8 лет назад

ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick ...

CVSS3: 6.5
github
больше 3 лет назад

ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.

CVSS3: 6.5
fstec
больше 8 лет назад

Уязвимость функции ReadGIFImage (coders/gif.c) кроссплатформенной библиотеки для работы с графикой GraphicsMagick и консольного графического редактора ImageMagick, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 98%
0.50442
Средний

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200