Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The ReadJNGImage and ReadOneJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 do not properly manage image pointers after certain error conditions, which allows remote attackers to conduct use-after-free attacks via a crafted file, related to a ReadMNGImage out-of-order CloseBlob call. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-11403.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GraphicsMagick 安全漏洞
Vulnerability Description
GraphicsMagick是一套简单的图像处理工具。该工具对图像提供尺寸调整、旋转、加亮等功能。 GraphicsMagick 1.3.26版本中的coders/png.c文件的‘ReadJNGImage’和‘ReadOneJNGImage’函数存在安全漏洞，该漏洞源于程序没有正确的管理图像指针。远程攻击者可借助特制的文件利用该漏洞实施释放后重用攻击。
CVSS Information
N/A
Vulnerability Type
N/A