GraphicsMagick CVE-2017-15930 Denial of Service Vulnerability

Bugtraq ID:	101607
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-15930
Remote:	Yes
Local:	No
Published:	Oct 27 2017 12:00AM
Updated:	Dec 19 2017 09:00PM
Credit:	The vendor reported this issue.
Vulnerable:	GraphicsMagick GraphicsMagick 1.3.26
Not Vulnerable:

GraphicsMagick CVE-2017-15930 Denial of Service Vulnerability

GraphicsMagick is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to cause denial-of-service conditions.

GraphicsMagick 1.3.26 is vulnerable; other versions may also be affected.

GraphicsMagick CVE-2017-15930 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GraphicsMagick CVE-2017-15930 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

GraphicsMagick CVE-2017-15930 Denial of Service Vulnerability

References:

• #518 Null pointer in (sourceforge.net)
  
• GraphicsMagick Homepage (GraphicsMagick)
  
• ReadOneJNGImage(): Add more checks for use of null PixelPacket pointer. (Graphicsmagick)
  
• ReadOneJNGImage(): Fix possible use of NULL pointer when transferring JPEG scanl (Graphicsmagick)