CVE-2017-11639

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.6-1

Description The issue is caused by a buffer over-read in memory when converting a file, related to the WriteCIPImage() function in coders/cip.c and the GetPixelLuma function in MagickCore/pixel-accessor.h. This can be exploited by a remote attacker using a specially crafted file, potentially leading to a denial of service.

Recommendations For ImageMagick version 7.0.6-1, consider disabling the WriteCIPImage() function or restricting the use of the GetPixelLuma function in MagickCore/pixel-accessor.h until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.