Memory corruption in ImageWorsener - CVE-2017-8327
Published: June 6, 2017 / Updated: June 8, 2017
Vulnerability identifier: #VU6931
CSH Severity: Low
CVSS v4.0:
CVE-ID: CVE-2017-8327
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Jason Summer
Affected software:
ImageWorsener
ImageWorsener
Detailed vulnerability description
The bmpr_read_uncompressed function in imagew-bmp.c in
libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers
to cause a denial of service (memory consumption) via a crafted image.
How to mitigate CVE-2017-8327
Update to version 1.3.1.