Date: Tue, 03 Oct 2017 07:30:06 +0000 From: Terry Chia <terrycwk1994@...il.com> To: oss-security@...ts.openwall.com Subject: Graphicsmagick: NULL Pointer Dereference in DICOM Decoder (CVE-2017-14994) A null pointer dereference vulnerability in the GraphicsMagick DICOM image decoder allows an attacker to cause a denial-of-service condition or other unspecified impact. Bug: https://sourceforge.net/p/graphicsmagick/bugs/512/ Writeup: https://nandynarwhals.org/CVE-2017-14994/ Timeline: 30 Sept 2017 - Discovery of the vulnerability. 1 Oct 2017 - Disclosure of vulnerability to the vendor. 1 Oct 2017 - Vulnerability fixed in mercurial commit. 2 Oct 2017 - CVE number requested. 3 Oct 2017 - CVE-2017-14994 assigned. 3 Oct 2017 - Advisory sent to oss-security mailing list. This issue was discovered by Terry Chia (Ayrx) and Jeremy Heng (@nn_amon).
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.