potrace

NPM

www.npmjs.com

github.com

Releases10

Frequency5 months 2 weeks

Last Releasealmost 6 years ago

Potrace in Javascript, for NodeJS

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2017-12067NVD↗	= 1.14	Aug 1, 2017Tuesday, 1 August 2017, 05:29	—	5 MEDIUM
Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c.
CVE-2017-7263NVD↗	= 1.14	Mar 26, 2017Sunday, 26 March 2017, 05:59	—	6.8 MEDIUM
The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8698.
CVE-2016-8698NVD↗	<= 1.12	Jan 31, 2017Tuesday, 31 January 2017, 22:59	—	6.8 MEDIUM
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, CVE-2016-8702, and CVE-2016-8703.
CVE-2016-8695NVD↗	<= 1.12	Jan 31, 2017Tuesday, 31 January 2017, 22:59	—	4.3 MEDIUM
The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted BMP image, a different vulnerability than CVE-2016-8694 and CVE-2016-8696.
CVE-2016-8696NVD↗	<= 1.12	Jan 31, 2017Tuesday, 31 January 2017, 22:59	—	4.3 MEDIUM
The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted BMP image, a different vulnerability than CVE-2016-8694 and CVE-2016-8695.
CVE-2016-8697NVD↗	<= 1.12	Jan 31, 2017Tuesday, 31 January 2017, 22:59	—	4.3 MEDIUM
The bm_new function in bitmap.h in potrace before 1.13 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted BMP image.
CVE-2016-8685NVD↗	<= 1.12	Jan 31, 2017Tuesday, 31 January 2017, 22:59	—	4.3 MEDIUM
The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service (invalid memory access and crash) via a crafted BMP image.
CVE-2016-8699NVD↗	<= 1.12	Jan 31, 2017Tuesday, 31 January 2017, 22:59	—	6.8 MEDIUM
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8700, CVE-2016-8701, CVE-2016-8702, and CVE-2016-8703.
CVE-2016-8700NVD↗	<= 1.12	Jan 31, 2017Tuesday, 31 January 2017, 22:59	—	6.8 MEDIUM
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8701, CVE-2016-8702, and CVE-2016-8703.
CVE-2016-8701NVD↗	<= 1.12	Jan 31, 2017Tuesday, 31 January 2017, 22:59	—	6.8 MEDIUM
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8700, CVE-2016-8702, and CVE-2016-8703.
CVE-2016-8702NVD↗	<= 1.12	Jan 31, 2017Tuesday, 31 January 2017, 22:59	—	6.8 MEDIUM
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, and CVE-2016-8703.
CVE-2016-8703NVD↗	<= 1.12	Jan 31, 2017Tuesday, 31 January 2017, 22:59	—	6.8 MEDIUM
Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a crafted BMP image, a different vulnerability than CVE-2016-8698, CVE-2016-8699, CVE-2016-8700, CVE-2016-8701, and CVE-2016-8702.
CVE-2016-8694NVD↗	<= 1.12	Jan 31, 2017Tuesday, 31 January 2017, 22:59	—	4.3 MEDIUM
The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted BMP image, a different vulnerability than CVE-2016-8695 and CVE-2016-8696.
CVE-2016-8686NVD↗	<= 1.12	Jan 31, 2017Tuesday, 31 January 2017, 22:59	—	6.8 MEDIUM
The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.