CVE-2017-16547

The DrawImage function in magick/render.c in GraphicsMagick 1.3.26 does not properly look for pop keywords that are associated with push keywords, which allows…

published November 6, 2017

CVSS
—
EPSS
2%
Percentile
83.3
In the wild
Unconfirmed
What it is

The DrawImage function in magick/render.c in GraphicsMagick 1.3.26 does not properly look for pop keywords that are associated with push keywords, which allows remote attackers to cause a denial of service (negative strncpy and application crash) or possibly have unspecified other impact via a crafted file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02333 · 83.3th percentile
Published
2017-11-06T05:00Z
EPSS history
Timeline
  • 06 NOV 05:00Z
    The DrawImage function in magick/render.c in GraphicsMagick 1.3.26 does not properly look for pop keywords that are associated with push keywords, which allows…
    cvelistv5