CVE-2016-7392

Heap-based buffer overflow in the pstoedit_suffix_table_init function in output-pstoedit.c in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted bmp image file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 77%
Affected Products (NVD)
VendorProductVersion
autotrace_projectautotrace
0.31.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
autotrace
artful
dne
bionic
dne
cosmic
dne
precise
Fixed 0.31.1-16+deb7u1build0.12.04.1
released
trusty
Fixed 0.31.1-16+deb7u1build0.14.04.1
released
xenial
Fixed 0.31.1-16+nmu1.2ubuntu0.1
released
yakkety
ignored
zesty
ignored
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
autotrace
Amazon Linux 2
0:0.31.1-38.amzn2.0.1
fixed
autotrace-debuginfo
Amazon Linux 2
0:0.31.1-38.amzn2.0.1
fixed
autotrace-devel
Amazon Linux 2
0:0.31.1-38.amzn2.0.1
fixed
Common Weakness Enumeration
References
http://www.openwall.com/lists/oss-security/2016/09/10/3
http://www.openwall.com/lists/oss-security/2016/09/12/7
http://www.securityfocus.com/bid/92907
https://blogs.gentoo.org/ago/2016/09/10/autotrace-heap-based-buffer-overflow-in-pstoedit_suffix_table_init-output-pstoedit-c/
https://bugzilla.redhat.com/show_bug.cgi?id=1375255
https://security.gentoo.org/glsa/201708-09
http://www.openwall.com/lists/oss-security/2016/09/10/3
http://www.openwall.com/lists/oss-security/2016/09/12/7
http://www.securityfocus.com/bid/92907
https://blogs.gentoo.org/ago/2016/09/10/autotrace-heap-based-buffer-overflow-in-pstoedit_suffix_table_init-output-pstoedit-c/
https://bugzilla.redhat.com/show_bug.cgi?id=1375255
https://security.gentoo.org/glsa/201708-09