CVE-2017-8327 The bmpr_read_uncompressed function in imagew-bmp.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted image.
MediumCVSS 6.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The bmpr_read_uncompressed function in imagew-bmp.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| entropymine imageworsener | <= 1.3.0 | No fix listed |
References
- blogs.gentoo.org patch third-party-advisory vdb-entry
- github.com issue-tracking patch third-party-advisory
- GLSA-201706-06 third-party-advisory vendor-advisory