CVE-2017-1000476

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.7-12 Q16

Description: A CPU exhaustion issue was found in the ReadDDSInfo function in coders/dds.c, allowing attackers to cause a denial of service. This issue is related to uncontrolled resource consumption, which can be exploited by a remote attacker to cause a service disruption.

Recommendations: For ImageMagick version 7.0.7-12 Q16, consider disabling the ReadDDSInfo function in coders/dds.c as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.