Memory corruption in ImageMagick - CVE-2017-5507
Published: May 29, 2017
Vulnerability identifier: #VU6788
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-5507
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The weakness exists in mpc.c source code file due to improper memory management by the affected software via unspecified vectors involving a pixel cache. A remote attacker can provide a specially crafted .mpc file, trigger memory corruption and cause the application to crash.
Successful exploitation of the vulnerability results in denial of service.
The weakness exists in mpc.c source code file due to improper memory management by the affected software via unspecified vectors involving a pixel cache. A remote attacker can provide a specially crafted .mpc file, trigger memory corruption and cause the application to crash.
Successful exploitation of the vulnerability results in denial of service.
Affected software
ImageMagick
How to mitigate CVE-2017-5507
Update to version 6.9.7-4 or 7.0.4-4.