PT-2017-2822
CVE-2017-12691
·
Publicado
2017-08-07
·
Atualizado
2020-09-08
Descrição por
CVSS 2.0
7.1
AltaMétricasAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
ImageMagick version 7.0.6-6
Description
The issue is related to the
ReadOneLayer function in coders/xcf.c, which can cause a denial of service due to memory consumption when processing a crafted file. This allows remote attackers to exploit the vulnerability, leading to a denial of service.Recommendations
For ImageMagick version 7.0.6-6, consider disabling the
ReadOneLayer function as a temporary workaround until a patch is available. Restrict access to files that could potentially exploit this issue to minimize the risk of denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Explorabilidade
Exploit
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾