SB2017052907 - Multiple vulnerabilities in ImageMagick

Description

This security bulletin contains information about 3 secuirty vulnerabilities.

1) Null pointer dereference (CVE-ID: CVE-2017-6497)

The vulnerability allows a local attacker to cause DoS condition on the target system.

The weakness exists in psd.c source code file due to insufficient sanitization of user-supplied input. A local attacker can provide a specially crafted .psd file, trigger NULL pointer dereference and cause the application to crash.

Successful exploitation of the vulnerability results in denial of service.

2) Memory corruption (CVE-ID: CVE-2017-5507)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists in mpc.c source code file due to improper memory management by the affected software via unspecified vectors involving a pixel cache. A remote attacker can provide a specially crafted .mpc file, trigger memory corruption and cause the application to crash.

Successful exploitation of the vulnerability results in denial of service.

3) Heap-based buffer overflow (CVE-ID: CVE-2017-5508)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists in the PushQuantumPixel function due to heap-based buffer overflow when handling malicious TIFF files. A remote attacker can create a specially crafted TIFF file, trick the victim into opening it, trigger memory corruption and cause the application to crash.

Successful exploitation of the vulnerability results in denial of service.
 

Remediation

Install update from vendor's website.

References

• http://www.vuxml.org/freebsd/50776801-4183-11e7-b291-b499baebfeaf.html
• https://github.com/ImageMagick/ImageMagick/commit/7f2dc7a1afc067d0c89f12c82bcdec0445fb1b94
• https://github.com/ImageMagick/ImageMagick/commit/4493d9ca1124564da17f9b628ef9d0f1a6be9738
• https://github.com/ImageMagick/ImageMagick/commit/379e21cd32483df6e128147af3bc4ce1f82eb9c4