CVE-2017-12692

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-6

Description The issue is related to the ReadVIFFImage function in coders/viff.c, which is vulnerable to errors in resource management. This can be exploited by remote attackers to cause a denial of service through memory consumption by using a specially crafted VIFF file.

Recommendations For ImageMagick version 7.0.6-6, consider disabling the ReadVIFFImage function as a temporary workaround until a patch is available. Restrict access to VIFF files to minimize the risk of exploitation.