CVE-2017-17915: High severity GraphicsMagick Graphicsmagick vulnerability
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2017-17915?
CVE-2017-17915 is a vulnerability in GraphicsMagick 1.4 snapshot-20171217 Q8 that allows a heap-based buffer over-read.
What is the severity of CVE-2017-17915?
CVE-2017-17915 has a severity score of 8.8, indicating a high severity.
How does CVE-2017-17915 impact GraphicsMagick?
CVE-2017-17915 affects GraphicsMagick 1.4 snapshot-20171217 Q8 and can lead to a heap-based buffer over-read in ReadMNGImage in coders/png.c.
How can I fix CVE-2017-17915?
To fix CVE-2017-17915, update your GraphicsMagick installation to version 1.3.27-3 or later.
Where can I find more information about CVE-2017-17915?
You can find more information about CVE-2017-17915 at the following references: [CVE-2017-17915](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17915), [GraphicsMagick commit](http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/1721f1b7e67a), [GraphicsMagick bug report](https://sourceforge.net/p/graphicsmagick/bugs/535/).