CVE

Id
95520  
CVE No.
CVE-2016-8700  
Status
Candidate  
Description
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8701, CVE-2016-8702, and CVE-2016-8703.  
Phase
Assigned (20161015)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
798871 95520 CVE-2016-8700 MLIST:[oss-security] 20160818 potrace: multiple crashes  View
798872 95520 CVE-2016-8700 URL:http://www.openwall.com/lists/oss-security/2016/08/18/11  View
798873 95520 CVE-2016-8700 MLIST:[oss-security] 20161015 Re: potrace: multiple crashes  View
798874 95520 CVE-2016-8700 URL:http://www.openwall.com/lists/oss-security/2016/10/16/12  View
798875 95520 CVE-2016-8700 MISC:https://blogs.gentoo.org/ago/2016/08/08/potrace-multiplesix-heap-based-buffer-overflow-in-bm_readbody_bmp-bitmap_io-c/  View
798876 95520 CVE-2016-8700 CONFIRM:http://potrace.sourceforge.net/ChangeLog  View
798877 95520 CVE-2016-8700 BID:93778  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5457 JVNDB-2016-006230 Django におけるデータベースサーバへのアクセス権を取得される脆弱性 Django は、Oracle データベースで test を実行中に作成される一時データベースユーザにハードコードされたパスワードを使用するため、データベースサーバへのアクセス権を取得される脆弱性が存在します。 CVE-2016-9013 95520 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006230.html  View