Exploitation Summary
EIP tracks 1 public exploit for CVE-2017-16352. PoCs published by SecuriTeam.
AI-analyzed exploit summary The exploit demonstrates a memory information disclosure and heap overflow vulnerability in GraphicsMagick's DescribeImage function. It uses a crafted MIFF file to leak libc addresses and trigger a heap overflow via an overly long directory name.
Description
GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage() function of the magick/describe.c file. One possible way to trigger the vulnerability is to run the identify command on a specially crafted MIFF format file with the verbose flag.
Exploits (1)
The exploit demonstrates a memory information disclosure and heap overflow vulnerability in GraphicsMagick's DescribeImage function. It uses a crafted MIFF file to leak libc addresses and trigger a heap overflow via an overly long directory name.
References (9)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H