GraphicsMagick CVE-2017-16353 Information Disclosure Vulnerability
BID:101653
Info
GraphicsMagick CVE-2017-16353 Information Disclosure Vulnerability
| Bugtraq ID: | 101653 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2017-16353 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 01 2017 12:00AM |
| Updated: | Dec 19 2017 10:00PM |
| Credit: | Jeremy Heng (@nn_amon) and Terry Chia (Ayrx). |
| Vulnerable: |
GraphicsMagick GraphicsMagick 1.3.26 |
| Not Vulnerable: | |
Discussion
GraphicsMagick CVE-2017-16353 Information Disclosure Vulnerability
GraphicsMagick is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to obtain sensitive information that may aid in further attacks.
GraphicsMagick is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to obtain sensitive information that may aid in further attacks.
Exploit / POC
GraphicsMagick CVE-2017-16353 Information Disclosure Vulnerability
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
Solution / Fix
GraphicsMagick CVE-2017-16353 Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
GraphicsMagick CVE-2017-16353 Information Disclosure Vulnerability
References:
References:
- GraphicsMagick Homepage (GraphicsMagick)
- SSD Advisory �?? GraphicsMagick Multiple Vulnerabilities (SecuriTeam)
- GraphicsMagick Changelog (GraphicsMagick)