CVE-2017-7452

The iwbmp_read_info_header function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

Score

CVSS 3.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2017-04-06

Last modified

2024-08-05

Weaknesses

CWE-476

Affected products

• Imageworsener (Entropymine)

References

• http://www.securityfocus.com/bid/97496
• https://github.com/jsummers/imageworsener/issues/8
• https://security.gentoo.org/glsa/201706-06