Imagemagick · Imagemagick · CVE-2017-5508
**Name of the Vulnerable Software and Affected Versions**
ImageMagick versions prior to 6.9.7-3
ImageMagick versions 7.x prior to 7.0.4-3
**Description**
A heap-based buffer overflow issue exists in the PushQuantumPixel function, allowing remote attackers to cause a denial of service, resulting in an application crash, by providing a crafted TIFF file.
**Recommendations**
For ImageMagick versions prior to 6.9.7-3, update to version 6.9.7-3 or later.
For ImageMagick versions 7.x prior to 7.0.4-3, update to version 7.0.4-3 or later.