Test ID:	1.3.6.1.4.1.25623.1.0.810540
Category:	Denial of Service
Title:	GraphicsMagick 'SVG File Parsing' Denial of Service Vulnerability - 02 - Windows
Summary:	GraphicsMagick is prone to a denial of service (DoS) vulnerability.
Description:	Summary: GraphicsMagick is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is due to heap and stack buffer overflow errors in TracePoint function in magick/render.c, GetToken function in magick/utility.c, and GetTransformTokens function in coders/svg.c related with the parsing and processing of SVG files. Vulnerability Impact: Successful exploitation will allow remote attackers to cause a denial of service via a crafted SVG file. Affected Software/OS: GraphicsMagick versions 1.3.23 and 1.3.24 on Windows Solution: Upgrade to version 1.3.25 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-2317 BugTraq ID: 83241 http://www.securityfocus.com/bid/83241 Debian Security Information: DSA-3746 (Google Search) http://www.debian.org/security/2016/dsa-3746 http://www.openwall.com/lists/oss-security/2016/02/11/6 http://www.openwall.com/lists/oss-security/2016/05/20/4 http://www.openwall.com/lists/oss-security/2016/05/27/4 http://www.openwall.com/lists/oss-security/2016/05/31/3 http://www.openwall.com/lists/oss-security/2016/09/07/4 http://www.openwall.com/lists/oss-security/2016/09/18/8 SuSE Security Announcement: SUSE-SU-2016:1783 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00010.html SuSE Security Announcement: openSUSE-SU-2016:1724 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00000.html SuSE Security Announcement: openSUSE-SU-2016:2073 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00037.html
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.