PT-2017-2112 · Imagemagick+2 · Imagemagick+2
Jgj212
·
Publicado
2017-05-04
·
Atualizado
2019-10-03
·
CVE-2017-8765
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
ImageMagick version 7.0.5-5
Description
The issue is related to a memory leak vulnerability in the ReadICONImage function, located in codersicon.c. This vulnerability can be exploited by a remote attacker using a specially crafted ICON file, potentially causing memory exhaustion and leading to a denial-of-service condition.
Recommendations
For ImageMagick version 7.0.5-5, consider disabling the ReadICONImage function as a temporary workaround until a patch is available. Restrict access to handling ICON files to minimize the risk of exploitation. Avoid using the affected function to process ICON files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Missing Release of Resource after Effective Lifetime
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Imagemagick
Suse
Ubuntu