Heap-based buffer overflow in the pstoedit_suffix_table_init function in output-pstoedit.c in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted bmp image file.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Heap-based buffer overflow in the pstoedit_suffix_table_init function in output-pstoedit.c in AutoTrace     0.31.1 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted bmp image     file. (CVE-2016-7392)

Note that Nessus relies on the presence of the package as reported by the vendor.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1929 advisory.

    Heap-based buffer overflow in the pstoedit_suffix_table_init function in output-pstoedit.c in AutoTrace     0.31.1 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted bmp image     file. (CVE-2016-7392)

    A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an     unexpected input value to malloc via a malformed bitmap image. (CVE-2019-19004)

    A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a     malformed bitmap image. This may occur after the use-after-free in CVE-2017-9182. (CVE-2019-19005)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201708-09 (AutoTrace: Multiple vulnerabilities)

    Heap-based buffer overflows have been discovered in the       pstoedit_suffix_table_init and pnm_load_rawpbm functions of AutoTrace.
  Impact :

    Remote attackers, by enticing a user to process a crafted bmp image       file, could cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Autotrace is a program for converting bitmaps to vector graphics. It had a bug that caused an out-of-bounds write. This was caused by not allocating sufficient memory to store the terminating NULL pointer in an array.

For Debian 7 'Wheezy', this problem have been fixed in version 0.31.1-16+deb7u1.

We recommend that you upgrade your autotrace packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
219930	Linux Distros Unpatched Vulnerability : CVE-2016-7392	Nessus	Misc.	Local	medium
171047	Amazon Linux 2 : autotrace, autotrace-devel (ALAS-2023-1929)	Nessus	Amazon Linux Local Security Checks	Local	high
102798	GLSA-201708-09 : AutoTrace: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	critical
93543	Debian DLA-621-1 : autotrace security update	Nessus	Debian Local Security Checks	Local	medium

Detections

Analytics

CVE-2016-7392

medium

Tenable Plugins

medium

high

critical

medium