Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-11448

Опубликовано: 19 июл. 2017
Источник: debian
EPSS Низкий

Описание

The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
imagemagickfixed8:6.9.7.4+dfsg-12package

Примечания

  • https://github.com/ImageMagick/ImageMagick/issues/556

  • https://github.com/ImageMagick/ImageMagick/commit/1737ac82b335e53376382c07b9a500d73dd2aa11

EPSS

Процентиль: 71%
0.00658
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 8 лет назад

The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file.

CVSS3: 3.3
redhat
больше 8 лет назад

The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file.

CVSS3: 6.5
nvd
больше 8 лет назад

The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file.

CVSS3: 6.5
github
больше 3 лет назад

The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file.

suse-cvrf
почти 8 лет назад

Security update for GraphicsMagick

EPSS

Процентиль: 71%
0.00658
Низкий