CVE-2016-7392 — Out-of-bounds Write in Project Autotrace

CWE-787 — Out-of-bounds Write7 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.4%
top 38.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Autotrace Project Autotrace
Timeline
PublishedFeb 15
Latest updateMay 17

Description

Heap-based buffer overflow in the pstoedit_suffix_table_init function in output-pstoedit.c in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted bmp image file.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶Ubuntuautotrace_project/autotrace< 0.31.1-16+deb7u1build0.14.04.1+1

🔴Vulnerability Details

2
GHSA
GHSA-wqjm-gjhr-8f6f: Heap-based buffer overflow in the pstoedit_suffix_table_init function in output-pstoedit↗2022-05-17
▶
OSV
CVE-2016-7392: Heap-based buffer overflow in the pstoedit_suffix_table_init function in output-pstoedit↗2017-02-15
▶

📋Vendor Advisories

1
Red Hat
autotrace: Out of bounds write when converting bmp image↗2016-09-10
▶

💬Community

3
Bugzilla
CVE-2016-7392 autotrace: Out of bounds write when converting bmp image↗2016-09-12
▶
Bugzilla
CVE-2016-7392 autotrace: Out of bounds write when converting bmp image [epel-5]↗2016-09-12
▶
Bugzilla
CVE-2016-7392 autotrace: Out of bounds write when converting bmp image [fedora-all]↗2016-09-12
▶