CVE-2017-7624

The iw_read_bmp_file function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to consume an amount of available memory via a crafted file.

Score

CVSS 3.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2017-04-10

Last modified

2024-08-05

Weaknesses

CWE-772

Affected products

• Imageworsener (Entropymine)

References

• http://www.securityfocus.com/bid/97575
• https://github.com/jsummers/imageworsener/issues/10