CVE-2017-15277 -- graphicsmagick| ID: oval:org.secpod.oval:def:1900292 | Date: (C)2019-02-27 (M)2023-12-20 |
| Class: VULNERABILITY | Family: unix |
ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.
| Platform: |
| Ubuntu 16.04 |
| Ubuntu 14.04 |
