CVE-2017-9179
HighSummary
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:425:14.
Risk Assessment
Attackers can exploit this vulnerability to disrupt service operation, potentially leading to system downtime.
Recommendation
It is recommended to update to the latest version of AutoTrace to mitigate this vulnerability.
Other vulnerabilities in libautotrace.a
See all- CVE-2017-9190High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid free), related to the free_bitmap function in bitmap.c:24:5.
- CVE-2017-9189High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and application crash), related to the GET_COLOR function in color.c.
- CVE-2017-9182High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (use-after-free and invalid heap read), related to the GET_COLOR function in color.c:16:11.
- CVE-2017-9181High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c.
- CVE-2017-9180High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:440:14.
- CVE-2017-9178High
The libautotrace.a in AutoTrace 0.31.1 has a vulnerability that allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c:421:11.
- CVE-2017-9177High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:390:12.
- CVE-2017-9176High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c:370:25.
- CVE-2017-9175High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c:353:25.
- CVE-2017-9174High
The libautotrace.a library in AutoTrace 0.31.1 has a vulnerability that allows remote attackers to cause a denial of service (invalid reads and SEGV), related to the GET_COLOR function in color.c:21:23.
Original NVD description (English source)
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:425:14.