SB2017052907 - Multiple vulnerabilities in ImageMagick

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2017052907

SB2017052907 - Multiple vulnerabilities in ImageMagick

Published: May 29, 2017

Security Bulletin ID SB2017052907
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 3
Exploitation vector Remote access
Highest impact Partial DoS

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 3 vulnerabilities.


1) Null pointer dereference (CVE-ID: CVE-2017-6497)

CWE-ID: CWE-476 - NULL Pointer Dereference

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local attacker to cause DoS condition on the target system.

The weakness exists in psd.c source code file due to insufficient sanitization of user-supplied input. A local attacker can provide a specially crafted .psd file, trigger NULL pointer dereference and cause the application to crash.

Successful exploitation of the vulnerability results in denial of service.

2) Memory corruption (CVE-ID: CVE-2017-5507)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists in mpc.c source code file due to improper memory management by the affected software via unspecified vectors involving a pixel cache. A remote attacker can provide a specially crafted .mpc file, trigger memory corruption and cause the application to crash.

Successful exploitation of the vulnerability results in denial of service.

3) Heap-based buffer overflow (CVE-ID: CVE-2017-5508)

CWE-ID: CWE-122 - Heap-based Buffer Overflow

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists in the PushQuantumPixel function due to heap-based buffer overflow when handling malicious TIFF files. A remote attacker can create a specially crafted TIFF file, trick the victim into opening it, trigger memory corruption and cause the application to crash.

Successful exploitation of the vulnerability results in denial of service.
 

Remediation

Install update from vendor's website.

References