PT-2017-1954 · Imagemagick+2 · Imagemagick+2
Publicado
2017-04-30
·
Atualizado
2019-10-03
·
CVE-2017-8344
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
ImageMagick version 7.0.5-5
Description
The issue is related to the ReadPCXImage function in pcx.c, which allows attackers to cause a denial of service (memory leak) via a crafted file. This is due to a buffer overflow in memory. Exploitation of the issue may enable a remote attacker to cause a denial of service (loss of memory access) using a specially crafted file.
Recommendations
For ImageMagick version 7.0.5-5, consider disabling the ReadPCXImage function in pcx.c as a temporary workaround until a patch is available. Restrict access to the pcx.c module to minimize the risk of exploitation. Avoid using the ReadPCXImage function with untrusted files until the issue is resolved.
Correção
DoS
Buffer Overflow
Missing Release of Resource after Effective Lifetime
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Imagemagick
Suse
Ubuntu