ImageWorsener 'iwbmp_read_info_header()' Function Denial of Service Vulnerability

ImageWorsener is prone to a denial-of-service vulnerability .

An attacker can exploit this issue to crash the affected application, resulting in denial-of-service conditions.

ImageWorsener 1.3.0 is vulnerable; other versions may also be affected.

Information

Bugtraq ID: 97496
Class: Failure to Handle Exceptional Conditions
CVE: CVE-2017-7452

Remote: Yes
Local: No
Published: Apr 05 2017 12:00AM
Credit: bestshow
Vulnerable: ImageWorsener ImageWorsener 1.3

Not Vulnerable:

References:

• Fixed a BMP decoding bug (buffer underrun) (ImageWorsener)
  
• ImageWorsener Homepage (ImageWorsener)
  
• NULL pointer dereference in iwbmp_read_info_header (ImageWorsener)
  

Source: www.securityfocus.com