Memory corruption in GraphicsMagick - CVE-2017-16353

Vulnerability identifier: #VU11815

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-16353

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.

The weakness exists in the DescribeImage function of the magick/describe.c file due to heap-based buffer over-read because the portion of the code containing the vulnerability is responsible for printing the IPTC Profile information contained in the image and out-of-bounds buffer dereference because certain increments are never checked. A remote attacker can trick the victim into opening a specially crafted MIFF file and gain access to potentially sensitive information.

GraphicsMagick
Amazon Linux AMI
Fedora
Ubuntu
graphicsmagick (Alpine package)
graphicsmagick (Ubuntu package)
libgraphicsmagick-q16-3 (Ubuntu package)
libgraphicsmagick++-q16-12 (Ubuntu package)
GraphicsMagick

Install update from vendor's website.

graphicsmagick (Ubuntu package) - update to 1.3.23-1ubuntu0.4
libgraphicsmagick-q16-3 (Ubuntu package) - update to 1.3.23-1ubuntu0.4
libgraphicsmagick++-q16-12 (Ubuntu package) - update to 1.3.23-1ubuntu0.4
GraphicsMagick - addressed in versions 1.3.28-1.el6, 1.3.28-1.el7, 1.3.28-1.fc26, 1.3.28-1.fc27

• Exploit #1400 - GraphicsMagick - Memory Disclosure / Heap Overflow (March 18, 2020)

• http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset;node=e4e1c2a581d8

• Multiple vulnerabilities in GraphicsMagick
• Memory corruption in graphicsmagick (Alpine package)
• Amazon Linux AMI update for GraphicsMagick
• Fedora 27 update for GraphicsMagick
• Fedora 26 update for GraphicsMagick
• Fedora EPEL 7 update for GraphicsMagick
• Fedora EPEL 6 update for GraphicsMagick
• Ubuntu update for graphicsmagick