Base Score

HIGH7.5

CVE-2017-17783

In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8.

VectorNETWORK

Published Bycve@mitre.org

Published DateDec 20, 2017, 09:29

Weakness Type (CWE):CWE-125

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Base Severity

HIGH

Version

3.0

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

HIGH

Privileges Required (PR)

NONE

User Interaction (UI)

REQUIRED

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH

References

http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=60932931559a
https://sourceforge.net/p/graphicsmagick/bugs/529/
https://usn.ubuntu.com/4248-1/
https://www.debian.org/security/2018/dsa-4321

Base Score

HIGH7.5

Weakness Type (CWE):CWE-125

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Base Severity

HIGH

Version

3.0

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

HIGH

Privileges Required (PR)

NONE

User Interaction (UI)

REQUIRED

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH