CVE-2017-17504

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.7-12

Description The issue is related to a heap-based buffer over-read in the coders/png.c file, specifically in the Magick png read raw profile function, which can be triggered by a crafted file. This is also related to the ReadOneMNGImage function.

Recommendations For versions prior to 7.0.7-12, update to version 7.0.7-12 or later to resolve the issue.