CVE-2017-11449

Publicada em 19 jul 2017 · Atualizada em 05 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 3.5%

coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an image received from stdin.

Produtos afetados

n/a · n/a

Referências

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867896 https://github.com/ImageMagick/ImageMagick/commit/529ff26b68febb2ac03062c58452ea0b4c6edbc1 https://github.com/ImageMagick/ImageMagick/commit/b007dd3a048097d8f58949297f5b434612e1e1a3 https://github.com/ImageMagick/ImageMagick/issues/556 http://www.securityfocus.com/bid/99958