CVE-2016-7392

概要

参考情報

• openwall.com/lists/oss-security/2016/09/10/3 · Mailing List
• openwall.com/lists/oss-security/2016/09/12/7 · Mailing List
• securityfocus.com/bid/92907 · Third Party Advisory
• blogs.gentoo.org/ago/2016/09/10/autotrace-heap-based-buffer-overflow-in-pstoedit_suffix_table_init-output-pstoedit-c · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• security.gentoo.org/glsa/201708-09

autotrace のその他の脆弱性

• CVE-2022-32323高 7.3AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660.
• CVE-2019-19005高 7.8A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image. This may oc…
• CVE-2019-19004低 3.3A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an unexpected input value to malloc via a…
• CVE-2017-9200緊急 9.8libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:528:63.
• CVE-2017-9199緊急 9.8libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:192:19.