CVE-2018-16643

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.8-4

Description The issue is related to the functions ReadDCMImage, ReadPWPImage, ReadCALSImage, and ReadPICTImage in the components coders/dcm.c, coders/pwp.c, coders/cals.c, and coders/pict.c, which do not check the return value of the fputc function. This allows remote attackers to cause a denial of service via a crafted image file. The exploitation of this issue can lead to a disruption in service.

Recommendations For ImageMagick version 7.0.8-4, consider disabling the functions ReadDCMImage, ReadPWPImage, ReadCALSImage, and ReadPICTImage until a patch is available to prevent potential denial of service attacks. Restrict access to the components coders/dcm.c, coders/pwp.c, coders/cals.c, and coders/pict.c to minimize the risk of exploitation.