PT-2017-2582 · Imagemagick+1 · Imagemagick+1
K0Keoyo
·
Publicado
2017-07-29
·
Atualizado
2019-10-03
·
CVE-2017-11724
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
ImageMagick versions 6.9.9-3 through 7.0.6-3
ImageMagick version 7.x
Description
The issue is related to memory leaks in the ReadMATImage function, specifically involving the
quantum info and clone info data structures. This can potentially allow a remote attacker to cause memory loss.Recommendations
For ImageMagick versions 6.9.9-3 through 7.0.6-3, consider updating to a version that addresses the memory leaks in the ReadMATImage function.
For ImageMagick version 7.x, consider updating to a version that addresses the memory leaks in the ReadMATImage function.
As a temporary workaround, consider restricting access to the ReadMATImage function in the coders/mat.c file until a patch is available.
Correção
Missing Release of Resource after Effective Lifetime
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Imagemagick
Suse