PT-2017-12074

CVE-2017-11532

Published

2017-07-16

Updated

2019-10-03

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-1

Description The issue arises when ImageMagick processes a crafted file using the convert function, leading to a memory leak in the WriteMPCImage() function located in coders/mpc.c.

Recommendations For ImageMagick version 7.0.6-1, consider disabling the WriteMPCImage() function as a temporary workaround until a patch is available.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-772: Missing Release of Resource after Effective Lifetime

Related identifiers

CVE-2017-11532

BDU:2026-01420