Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-12434

Опубликовано: 04 авг. 2017
Источник: debian
EPSS Низкий

Описание

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service (assertion failure) in DestroyImageInfo in image.c.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
imagemagickfixed8:6.9.7.4+dfsg-14package
imagemagickignoredstretchpackage
imagemagicknot-affectedjessiepackage
imagemagicknot-affectedwheezypackage

Примечания

  • https://github.com/ImageMagick/ImageMagick/issues/547

  • https://github.com/ImageMagick/ImageMagick/commit/6767f31cac3eacdc9dc41b3193a73bdd37610375

EPSS

Процентиль: 59%
0.0038
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 8 лет назад

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service (assertion failure) in DestroyImageInfo in image.c.

CVSS3: 3.3
redhat
больше 8 лет назад

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service (assertion failure) in DestroyImageInfo in image.c.

CVSS3: 6.5
nvd
больше 8 лет назад

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service (assertion failure) in DestroyImageInfo in image.c.

CVSS3: 6.5
github
больше 3 лет назад

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service (assertion failure) in DestroyImageInfo in image.c.

fstec
больше 8 лет назад

Уязвимость функции ReadMATImage в coders/mat.c консольного графического редактора ImageMagick, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 59%
0.0038
Низкий