CVE-2017-14739

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-4

Description The issue is related to the AcquireResampleFilterThreadSet function in the magick/resample-private.h component of ImageMagick, which is associated with a null pointer dereference. This can be exploited by a remote attacker to cause a denial of service, leading to an application crash due to failed memory allocation in the DistortImage function in MagickCore/distort.c.

Recommendations For ImageMagick version 7.0.7-4, consider disabling the AcquireResampleFilterThreadSet function as a temporary workaround until a patch is available to prevent potential denial of service attacks.