PT-2017-18723

CVE-2017-9141

Published

2017-05-22

Updated

2020-10-15

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.5-7 Q16

Description A crafted file could trigger an assertion failure in the ResetImageProfileIterator function due to missing checks in the ReadDDSImage function.

Recommendations For ImageMagick version 7.0.5-7 Q16, consider updating to a newer version that addresses the issue in the ResetImageProfileIterator function and the ReadDDSImage function.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

CWE-617: Reachable Assertion

Related identifiers

CVE-2017-9141

DLA-960-1

DSA-3863-1