CVE-2016-8694

概要

参考情報

• potrace.sourceforge.net/ChangeLog · Release Notes
• openwall.com/lists/oss-security/2016/08/18/11 · Mailing List
• openwall.com/lists/oss-security/2016/10/16/12 · Mailing List
• securityfocus.com/bid/93778 · Third Party Advisory
• blogs.gentoo.org/ago/2016/08/08/potrace-multiple-three-null-pointer-dereference-in-bm_readbody_bmp-bitmap_io-c · Third Party Advisory

potrace のその他の脆弱性

• CVE-2017-12067高 7.5Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c.
• CVE-2017-7263高 7.8The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-rea…
• CVE-2016-8703高 7.8Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified…
• CVE-2016-8702高 7.8Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified…
• CVE-2016-8701高 7.8Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified…