CVE-2017-12805

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-6

Description A memory exhaustion issue was found in the ReadTIFFImage function, allowing attackers to cause a denial of service. The vulnerability is related to an error in the resource control mechanism, which can be exploited by a remote attacker to disrupt service.

Recommendations For ImageMagick version 7.0.6-6, consider disabling the ReadTIFFImage function as a temporary workaround until a patch is available. Restrict access to the ReadTIFFImage function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.