CVE-2017-11530

Name of the Vulnerable Software and Affected Versions ImageMagick versions 6.9.9-0 and earlier ImageMagick versions 7.x through 7.0.6-0

Description The issue is related to the ReadEPTImage function, which allows remote attackers to cause a denial of service due to memory consumption via a crafted file. This can lead to an uncontrolled resource expenditure, enabling a remote attacker to initiate a denial of service by exploiting the vulnerability with a specially formed file.

Recommendations For ImageMagick versions 6.9.9-0 and earlier, update to version 6.9.9-1 or later. For ImageMagick versions 7.x through 7.0.6-0, update to version 7.0.6-1 or later.