PT-2017-13404

CVE-2017-14343

Publicado

2017-09-12

Atualizado

2019-10-03

Descrição por

CVSS 3.1

6.5

Média

MétricasAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-6

Description The issue is related to a memory leak in the ReadXCFImage function, located in coders/xcf.c, which can be triggered by a crafted xcf image file.

Recommendations For ImageMagick version 7.0.6-6, consider updating to a newer version that contains a fix for this memory leak issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Explorabilidade

Exploit

Impactos

Pesquisadores

Jgj212

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-772: Missing Release of Resource after Effective Lifetime

Identificadores relacionados

CVE-2017-14343

OPENSUSE-SU-2018_0025-1