First published: Fri Sep 22 2017(Updated: )
In sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp. However, this can also cause a write to an illegal address.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
sam2p | =0.49.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-14637 has a medium severity rating due to the possibility of causing memory corruption.
To fix CVE-2017-14637, you should upgrade to a newer version of sam2p that addresses this vulnerability.
CVE-2017-14637 affects sam2p version 0.49.3 specifically.
Yes, CVE-2017-14637 can potentially lead to application crashes due to memory corruption.
CVE-2017-14637 is generally considered not directly exploitable remotely as it requires specific input to trigger the vulnerability.