PT-2017-18970 · Imagemagick+1 · Imagemagick+1

Publicado 2017-06-07 · Atualizado 2019-10-03 · CVE-2017-9500

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.5-8 Q16

Description An assertion failure was found in the function ResetImageProfileIterator, allowing attackers to cause a denial of service via a crafted file.

Recommendations For ImageMagick version 7.0.5-8 Q16, consider updating to a newer version to resolve the issue, as no specific fix is provided for this version.

Correção

DoS

Assertion Failure

Enumeração de Fraquezas

CWE-617

Identificadores relacionados

CVE-2017-9500

DLA-1000-1

DLA-1785-1

DSA-3914-1

DSA-4019-1

MGASA-2018-0229

SUSE-SU-2018:0857-1

SUSE-SU-2018:0880-1

Produtos afetados

Imagemagick

Suse

Referências · 237

• https://github.com/ImageMagick/ImageMagick/issues/526 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/562 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/560 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/910 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/500 · Correção
• https://github.com/ImageMagick/ImageMagick/issues/653 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/584 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/506 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/652 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/591 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/539 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/519 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/561 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/654 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/715 · Nota