CVE-2017-12433

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.6-1

Description The issue is related to a memory leak vulnerability in the ReadPESImage function in coders/pes.c, which can cause a denial of service. This is associated with the ResizeMagickMemory function in memory.c. The vulnerability can be exploited by a remote attacker to cause a denial of service.

Recommendations For ImageMagick version 7.0.6-1, consider disabling the ReadPESImage function as a temporary workaround until a patch is available. Restrict access to the ResizeMagickMemory function in memory.c to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.