PT-2017-1943 · Imagemagick+2 · Imagemagick+2
Publicado
2017-04-30
·
Atualizado
2019-10-03
·
CVE-2017-8355
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
ImageMagick versions 7.0.5-5
Description
The issue is caused by a buffer overflow in the ReadMTVImage function in mtv.c, which can lead to a denial of service (memory leak) when a specially crafted file is processed. This can be exploited by a remote attacker to cause the service to become unavailable.
Recommendations
For ImageMagick version 7.0.5-5, consider disabling the ReadMTVImage function in mtv.c as a temporary workaround until a patch is available. Restrict access to the mtv.c module to minimize the risk of exploitation. Avoid using the ReadMTVImage function with untrusted input files until the issue is resolved.
Correção
DoS
Buffer Overflow
Missing Release of Resource after Effective Lifetime
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Imagemagick
Suse
Ubuntu