ID de Prueba:	1.3.6.1.4.1.25623.1.0.810540
Categoría:	Denial of Service
Título:	GraphicsMagick 'SVG File Parsing' Denial of Service Vulnerability-02 (Windows)
Resumen:	GraphicsMagick is prone to a denial of service (DoS) vulnerability.
Descripción:	Summary: GraphicsMagick is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is due to heap and stack buffer overflow errors in TracePoint function in magick/render.c, GetToken function in magick/utility.c, and GetTransformTokens function in coders/svg.c related with the parsing and processing of SVG files. Vulnerability Impact: Successful exploitation will allow remote attackers to cause a denial of service via a crafted SVG file. Affected Software/OS: GraphicsMagick versions 1.3.23 and 1.3.24 on Windows Solution: Upgrade to version 1.3.25 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Referencia Cruzada:	BugTraq ID: 83241 Common Vulnerability Exposure (CVE) ID: CVE-2016-2317 http://www.securityfocus.com/bid/83241 Debian Security Information: DSA-3746 (Google Search) http://www.debian.org/security/2016/dsa-3746 http://www.openwall.com/lists/oss-security/2016/02/11/6 http://www.openwall.com/lists/oss-security/2016/05/20/4 http://www.openwall.com/lists/oss-security/2016/05/27/4 http://www.openwall.com/lists/oss-security/2016/05/31/3 http://www.openwall.com/lists/oss-security/2016/09/07/4 http://www.openwall.com/lists/oss-security/2016/09/18/8 SuSE Security Announcement: SUSE-SU-2016:1783 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00010.html SuSE Security Announcement: openSUSE-SU-2016:1724 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00000.html SuSE Security Announcement: openSUSE-SU-2016:2073 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00037.html
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.