PT-2017-2820
CVE-2017-12693
·
Published
2017-08-06
·
Updated
2020-09-08
Description by
CVSS 2.0
7.1
HighMetricsAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
ImageMagick version 7.0.6-6
Description
The issue is related to errors in resource management in the ReadBMPImage function, which can be exploited by remote attackers to cause a denial of service through memory consumption. This can be achieved by using a specially crafted BMP file.
Recommendations
For ImageMagick version 7.0.6-6, consider disabling the ReadBMPImage function as a temporary workaround until a patch is available. Restrict access to handling BMP files to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾