PT-2017-3620 · Imagemagick+2 · Imagemagick+2
Bestshow
·
Publicado
2017-09-07
·
Atualizado
2019-10-03
·
CVE-2017-18028
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
ImageMagick version 7.0.7-1 Q16
Description:
A memory exhaustion issue was found in the
ReadTIFFImage function in coders/tiff.c, which allows remote attackers to cause a denial of service via a crafted file. The vulnerability is related to resource management errors and can be exploited by an attacker to cause a service disruption using a specially formed file.Recommendations:
For ImageMagick version 7.0.7-1 Q16, consider disabling the
ReadTIFFImage function in coders/tiff.c as a temporary workaround to minimize the risk of exploitation.Exploit
Correção
DoS
Allocation of Resources Without Limits
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Imagemagick
Suse
Ubuntu