Divide by zero in ImageWorsener - CVE-2017-7962
Published: June 6, 2017 / Updated: June 8, 2017
Vulnerability identifier: #VU6928
CSH Severity: Low
CVSS v4.0:
CVE-ID: CVE-2017-7962
CWE-ID: CWE-369
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Jason Summer
Affected software:
ImageWorsener
ImageWorsener
Detailed vulnerability description
The iwgif_read_image function in imagew-gif.c in libimageworsener.a in
ImageWorsener 1.3.0 allows remote attackers to cause a denial of service
(divide-by-zero error and application crash) via a crafted file.
How to mitigate CVE-2017-7962
Update to version 1.3.1.