CVE-2016-2317 in GraphicsMagick
Summary
Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1) TracePoint function in magick/render.c, (2) GetToken function in magick/utility.c, and (3) GetTransformTokens function in coders/svg.c.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
02/11/2016
Disclosure
02/03/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 96522 | GraphicsMagick SVG File render.c GetTransformTokens memory corruption | 119 | Not defined | Official fix | CVE-2016-2317 |