PT-2017-4107 · Imagemagick+3 · Imagemagick+3

Alex

+1

·

Publicado

2017-09-22

·

Atualizado

2021-04-28

·

CVE-2017-1000445

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.7-1 and earlier
Description The issue is related to a null pointer dereference in the MagickCore component, which could lead to a denial of service. This allows a remote attacker to exploit the vulnerability and cause a service disruption.
Recommendations For ImageMagick versions 7.0.7-1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2017-2380
BDU:2021-03342
CVE-2017-1000445
DLA-1229-1
DLA-1785-1
DLA-2366-1
SUSE-SU-2018:0055-1
SUSE-SU-2018:0132-1
SUSE-SU-2018_0055-1
SUSE-SU-2018_0132-1
USN-3681-1

Produtos afetados

Alt Linux
Imagemagick
Suse
Ubuntu