CVE-2017-8351

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.5-5

Description The issue is related to the ReadPCDImage function in pcd.c, which allows attackers to cause a denial of service (memory leak) via a crafted file. This is due to a buffer overflow in memory. Exploitation of the issue may allow a remote attacker to cause a denial of service (loss of memory access) using a specially crafted file.

Recommendations For ImageMagick version 7.0.5-5, consider disabling the ReadPCDImage function in pcd.c as a temporary workaround until a patch is available. Restrict access to crafted files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.