CVE-2017-7263

The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-read and application…

published March 26, 2017

CVSS
—
EPSS
2%
Percentile
75.2
In the wild
Unconfirmed
What it is

The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8698.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01580 · 75.2th percentile
Published
2017-03-26T05:47Z
EPSS history
Timeline
  • 26 MAR 05:47Z
    The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-read and application…
    cvelistv5