[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fn8YsjOwLK_mH7ehHR6hyd2RIgzhqPUebYtG1p3ubY70":3,"g5a-risk:CVE-2017-14103":122},{"success":4,"data":5,"meta":120},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":48,"references":49,"referencesCount":66,"weaknesses":67,"weaknessesCount":48,"isActivelyExploited":76,"cisaInfo":15,"otxData":15,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":111,"notableEvents":112},"CVE-2017-14103","What is CVE-2017-14103?","The ReadJNGImage and ReadOneJNGImage functions in coders\u002Fpng.c in GraphicsMagick 1.3.26 do not properly manage image pointers after certain error conditions, which allows remote attackers to conduct use-after-free attacks via a crafted file, related to a ReadMNGImage out-of-order CloseBlob call. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-11403.","The ReadJNGImage and ReadOneJNGImage functions in coders\u002Fpng.c in GraphicsMagick 1.3.26 do not properly manage image pointers after certain error conditions,...","2017-09-01T13:29:00.477","2025-04-20T01:37:25.86",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",2.8,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":35,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":35,"Authentication":24,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.30248,[40,40,40,40,40,40,40],"High",[44],{"vendor":45,"product":45,"version":46,"criteria":47,"vulnerable":4},"graphicsmagick","1.3.26","cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*",1,[50,57,62,64],{"url":51,"source":52,"tags":53},"http:\u002F\u002Fhg.code.sf.net\u002Fp\u002Fgraphicsmagick\u002Fcode\u002Frev\u002F98721124e51f","Sf",[54,55,56],"Issue Tracking","Patch","Third Party Advisory",{"url":58,"source":59,"tags":60},"https:\u002F\u002Fblogs.gentoo.org\u002Fago\u002F2017\u002F09\u002F01\u002Fgraphicsmagick-use-after-free-in-closeblob-blob-c-incomplete-fix-for-cve-2017-11403\u002F","Gentoo",[55,56,61],"VDB Entry",{"url":51,"source":52,"tags":63},[54,55,56],{"url":58,"source":59,"tags":65},[55,56,61],4,[68],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","","Stable","Variant","Simple",false,[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2017-14103? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-14103, a high severity cyber security vulnerability from 2017. High exploit probability (30.2%). The ReadJNGImage and Read...","CVE-2017-14103, CVE-2017-14103 vulnerability, CVE-2017-14103 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, graphicsmagick security, graphicsmagick vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2017-14103",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":10,"dateModified":11,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-14103","Cybersecurity","CVE-2017-14103, CVE-2017-14103 vulnerability, CVE-2017-14103 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104],{"Operator":15,"Negate":15,"Nodes":105},[106],{"Operator":107,"Negate":15,"CPEMatch":108},"OR",[109],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":110,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4C227898-C6EC-41BE-A3AD-229FFD8B86D8",[],[113],{"id":114,"eventType":115,"eventTime":116,"details":117,"label":118,"color":119},"278e2a57-7f4f-428b-bd1f-9caf2c96e126","HIGH_EPSS_DELTA","2026-06-16T04:06:25.948419+00:00","Daily EPSS score increased by 0.292 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":121,"version":33},1792356052480,{"score":123,"band":124,"action":125,"scoredAt":126},42,"Medium","Plan remediation","2026-10-17T09:11:40.623584+00:00"]