PT-2017-4112 · Imagemagick+4 · Imagemagick+4
Henices
·
Publicado
2017-12-22
·
Atualizado
2020-09-08
·
CVE-2017-18271
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
ImageMagick version 7.0.7-16
Description
A denial of service issue was found in the
ReadMIFFImage function in coders/miff.c, allowing attackers to cause CPU exhaustion via a crafted MIFF image file. This issue can be exploited by remote attackers using a specially crafted MIFF image, leading to a denial of service.Recommendations
For ImageMagick version 7.0.7-16, consider disabling the
ReadMIFFImage function in coders/miff.c as a temporary workaround to minimize the risk of exploitation. Restrict access to MIFF image files until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
Infinite Loop
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Imagemagick
Red Hat
Suse
Ubuntu