CVE-2017-11531

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.6-1

Description The issue is caused by a buffer overflow in memory, potentially allowing a remote attacker to cause a memory leak in the WriteHISTOGRAMImage() function in coders/histogram.c. This can occur when processing a crafted file in the convert function.

Recommendations For ImageMagick version 7.0.6-1, consider restricting access to the WriteHISTOGRAMImage() function in coders/histogram.c until a patch is available. Avoid using the convert function with untrusted files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.