The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.
References
Link | Resource |
---|---|
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867811 | Issue Tracking Mailing List Third Party Advisory |
https://github.com/ImageMagick/ImageMagick/issues/522 | Issue Tracking Patch Third Party Advisory |
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867811 | Issue Tracking Mailing List Third Party Advisory |
https://github.com/ImageMagick/ImageMagick/issues/522 | Issue Tracking Patch Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:07
Type | Values Removed | Values Added |
---|---|---|
References | () https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867811 - Issue Tracking, Mailing List, Third Party Advisory | |
References | () https://github.com/ImageMagick/ImageMagick/issues/522 - Issue Tracking, Patch, Third Party Advisory |
Information
Published : 2017-07-23 03:29
Updated : 2024-11-21 03:07
NVD link : CVE-2017-11528
Mitre link : CVE-2017-11528
CVE.ORG link : CVE-2017-11528
JSON object : View
Products Affected
imagemagick
- imagemagick
CWE
CWE-772
Missing Release of Resource after Effective Lifetime