CVE-2017-9189
HighSummary
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and application crash), related to the GET_COLOR function in color.c.
Risk Assessment
Attackers can exploit this vulnerability to remotely trigger application crashes, potentially leading to service downtime.
Recommendation
It is recommended to upgrade to a newer version of AutoTrace to mitigate this vulnerability.
Other vulnerabilities in libautotrace.a
See all- CVE-2017-9190High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid free), related to the free_bitmap function in bitmap.c:24:5.
- CVE-2017-9182High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (use-after-free and invalid heap read), related to the GET_COLOR function in color.c:16:11.
- CVE-2017-9181High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c.
- CVE-2017-9180High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:440:14.
- CVE-2017-9179High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:425:14.
- CVE-2017-9178High
The libautotrace.a in AutoTrace 0.31.1 has a vulnerability that allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c:421:11.
- CVE-2017-9177High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:390:12.
- CVE-2017-9176High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c:370:25.
- CVE-2017-9175High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c:353:25.
- CVE-2017-9174High
The libautotrace.a library in AutoTrace 0.31.1 has a vulnerability that allows remote attackers to cause a denial of service (invalid reads and SEGV), related to the GET_COLOR function in color.c:21:23.
Original NVD description (English source)
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and application crash), related to the GET_COLOR function in color.c:16:11.