CVE-2017-5511

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow.

CVSS v3 9.8 CRITICAL
CVSS v2.0 7.5 HIGH

9.8^/10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.5^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.debian.org/security/2017/dsa-3799	Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/16/6	Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/17/5	Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/95746	Broken Link Third Party Advisory VDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851374	Issue Tracking Patch Third Party Advisory
https://github.com/ImageMagick/ImageMagick/commit/7d65a814ac76bd04760072c33e452371692ee790	Issue Tracking Patch Third Party Advisory
https://github.com/ImageMagick/ImageMagick/commit/c8c6a0f123d5e35c173125365c97e2c0fc7eca42	Issue Tracking Patch Third Party Advisory
https://github.com/ImageMagick/ImageMagick/issues/347	Issue Tracking Patch Third Party Advisory
https://security.gentoo.org/glsa/201702-09	Third Party Advisory
http://www.debian.org/security/2017/dsa-3799	Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/16/6	Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/17/5	Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/95746	Broken Link Third Party Advisory VDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851374	Issue Tracking Patch Third Party Advisory
https://github.com/ImageMagick/ImageMagick/commit/7d65a814ac76bd04760072c33e452371692ee790	Issue Tracking Patch Third Party Advisory
https://github.com/ImageMagick/ImageMagick/commit/c8c6a0f123d5e35c173125365c97e2c0fc7eca42	Issue Tracking Patch Third Party Advisory
https://github.com/ImageMagick/ImageMagick/issues/347	Issue Tracking Patch Third Party Advisory
https://security.gentoo.org/glsa/201702-09	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:imagemagick:imagemagick::::::::
	cpe:2.3:a:imagemagick:imagemagick::::::::

Configuration 2 (hide)

OR	cpe:2.3:o:debian:debian_linux:8.0:::::::*
	cpe:2.3:o:debian:debian_linux:9.0:::::::*

History

21 Nov 2024, 03:27

Type	Values Removed	Values Added
References	~~() http://www.debian.org/security/2017/dsa-3799 - Third Party Advisory~~	() http://www.debian.org/security/2017/dsa-3799 - Third Party Advisory
References	~~() http://www.openwall.com/lists/oss-security/2017/01/16/6 - Mailing List, Patch, Third Party Advisory~~	() http://www.openwall.com/lists/oss-security/2017/01/16/6 - Mailing List, Patch, Third Party Advisory
References	~~() http://www.openwall.com/lists/oss-security/2017/01/17/5 - Mailing List, Patch, Third Party Advisory~~	() http://www.openwall.com/lists/oss-security/2017/01/17/5 - Mailing List, Patch, Third Party Advisory
References	~~() http://www.securityfocus.com/bid/95746 - Broken Link, Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/95746 - Broken Link, Third Party Advisory, VDB Entry
References	~~() https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851374 - Issue Tracking, Patch, Third Party Advisory~~	() https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851374 - Issue Tracking, Patch, Third Party Advisory
References	~~() https://github.com/ImageMagick/ImageMagick/commit/7d65a814ac76bd04760072c33e452371692ee790 - Issue Tracking, Patch, Third Party Advisory~~	() https://github.com/ImageMagick/ImageMagick/commit/7d65a814ac76bd04760072c33e452371692ee790 - Issue Tracking, Patch, Third Party Advisory
References	~~() https://github.com/ImageMagick/ImageMagick/commit/c8c6a0f123d5e35c173125365c97e2c0fc7eca42 - Issue Tracking, Patch, Third Party Advisory~~	() https://github.com/ImageMagick/ImageMagick/commit/c8c6a0f123d5e35c173125365c97e2c0fc7eca42 - Issue Tracking, Patch, Third Party Advisory
References	~~() https://github.com/ImageMagick/ImageMagick/issues/347 - Issue Tracking, Patch, Third Party Advisory~~	() https://github.com/ImageMagick/ImageMagick/issues/347 - Issue Tracking, Patch, Third Party Advisory
References	~~() https://security.gentoo.org/glsa/201702-09 - Third Party Advisory~~	() https://security.gentoo.org/glsa/201702-09 - Third Party Advisory

27 Jun 2024, 14:37

Type	Values Removed	Values Added
CPE		cpe:2.3:o:debian:debian_linux:9.0:::::::* cpe:2.3:o:debian:debian_linux:8.0:::::::*
First Time		Debian debian Linux Debian
References	~~() http://www.debian.org/security/2017/dsa-3799 -~~	() http://www.debian.org/security/2017/dsa-3799 - Third Party Advisory
References	~~() http://www.securityfocus.com/bid/95746 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/95746 - Broken Link, Third Party Advisory, VDB Entry
References	~~() https://security.gentoo.org/glsa/201702-09 -~~	() https://security.gentoo.org/glsa/201702-09 - Third Party Advisory

Information

Published : 2017-03-24 15:59

Updated : 2024-11-21 03:27

NVD link : CVE-2017-5511

Mitre link : CVE-2017-5511

CVE.ORG link : CVE-2017-5511

JSON object : View

Products Affected

debian

debian_linux

imagemagick

imagemagick

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

9.8 /10