CVE-2017-18209

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7

Description A NULL pointer dereference issue occurs in the GetOpenCLCachedFilesDirectory function in magick/opencl.c, related to GetOpenCLCacheDirectory. This allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For ImageMagick version 7.0.7, as a temporary workaround, consider disabling the GetOpenCLCachedFilesDirectory function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.