CVE-2017-8355

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.5-5

Description The issue is caused by a buffer overflow in the ReadMTVImage function in mtv.c, which can lead to a denial of service (memory leak) when a specially crafted file is processed. This can be exploited by a remote attacker to cause the service to become unavailable.

Recommendations For ImageMagick version 7.0.5-5, consider disabling the ReadMTVImage function in mtv.c as a temporary workaround until a patch is available. Restrict access to the mtv.c module to minimize the risk of exploitation. Avoid using the ReadMTVImage function with untrusted input files until the issue is resolved.