Vulnetix
Try Vulnetix Request Demo
CVE-2017-15277 PUBLISHED

ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.

EPSS 50.44% · 97.8th percentile

Risk Scores

EPSS Score
50.44%
97.8th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSimagemagick0, 8:6.9.7.4+dfsg-16ubuntu2, 8:6.9.7.4+dfsg-16ubuntu3
Ubuntu:14.04:LTSimagemagick8:6.7.7.10-6ubuntu3.1, 8:6.7.7.10-6ubuntu3.2, 8:6.7.7.10-6ubuntu3.3
Ubuntu:Pro:14.04:LTSgraphicsmagick1.3.18-1ubuntu3.1+esm2, 1.3.18-1ubuntu3.1+esm3, 1.3.18-1ubuntu3.1+esm1
Ubuntu:16.04:LTSimagemagick8:6.8.9.9-7ubuntu5.9, 0, 8:6.8.9.9-5ubuntu2
Ubuntu:16.04:LTSgraphicsmagick1.3.23-1ubuntu0.3, 1.3.23-1ubuntu0.2, 1.3.23-1ubuntu0.1

Timeline

References

Open in Interactive Console →