PT-2017-2505 · Imagemagick+1 · Imagemagick+1

Jgj212 · Publicado 2017-07-19 · Atualizado 2019-10-03 · CVE-2017-11446

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.6-1

Description The issue is related to the ReadPESImage function in ImageMagick, which is affected by resource management errors. This can be exploited by a remote attacker using a specially crafted PES file to modify the cycle into an infinite loop, potentially causing CPU exhaustion.

Recommendations For ImageMagick version 7.0.6-1, consider disabling the ReadPESImage function as a temporary workaround until a patch is available to prevent potential CPU exhaustion via crafted PES files.

Correção

Infinite Loop

Enumeração de Fraquezas

CWE-399

CWE-835

Identificadores relacionados

BDU:2017-01715

CVE-2017-11446

DLA-1081-1

DLA-1785-1

DSA-4019-1

MGASA-2018-0229

SUSE-SU-2017:2949-1

Produtos afetados

Imagemagick

Suse

Referências · 180

• https://github.com/ImageMagick/ImageMagick/issues/562 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/560 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/910 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/653 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/584 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/652 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/537 · Correção
• https://github.com/ImageMagick/ImageMagick/issues/591 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/561 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/654 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/715 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/596 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/713 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/746 · Nota
• https://github.com/ImageMagick/ImageMagick/issues/714 · Nota