CVE-2017-12691

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-6

Description The issue is related to the ReadOneLayer function in coders/xcf.c, which can cause a denial of service due to memory consumption when processing a crafted file. This allows remote attackers to exploit the vulnerability, leading to a denial of service.

Recommendations For ImageMagick version 7.0.6-6, consider disabling the ReadOneLayer function as a temporary workaround until a patch is available. Restrict access to files that could potentially exploit this issue to minimize the risk of denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.