PT-2017-1949 · Imagemagick+2 · Imagemagick+2
Publicado
2017-04-30
·
Atualizado
2019-10-03
·
CVE-2017-8349
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
ImageMagick version 7.0.5-5
Description
The issue is related to the ReadSFWImage function in sfw.c, which can cause a denial of service due to a memory leak when processing a crafted file. This can allow a remote attacker to cause a denial of service by exploiting the buffer overflow in memory, resulting in memory access issues.
Recommendations
For ImageMagick version 7.0.5-5, consider disabling the ReadSFWImage function in sfw.c as a temporary workaround until a patch is available. Restrict access to the sfw.c module to minimize the risk of exploitation. Avoid using the ReadSFWImage function with untrusted files until the issue is resolved.
Correção
DoS
Buffer Overflow
Missing Release of Resource after Effective Lifetime
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Imagemagick
Suse
Ubuntu