PT-2017-12069 · Imagemagick+1 · Imagemagick+1
Lcatro
·
Publicado
2017-07-22
·
Atualizado
2017-08-22
·
CVE-2017-11522
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
ImageMagick versions 6.9.9-0 through 6.9.9-0 and 7.0.0 through 7.0.6-1
Description
The issue allows remote attackers to cause a denial of service via a crafted file, specifically through a NULL pointer dereference in the WriteOnePNGImage function in coders/png.c.
Recommendations
For ImageMagick versions 6.9.9-0 and 7.0.0 through 7.0.6-1, consider disabling the WriteOnePNGImage function as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Imagemagick