Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-14224

Опубликовано: 09 сент. 2017
Источник: debian
EPSS Низкий

Описание

A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
imagemagickfixed8:6.9.9.34+dfsg-3package

Примечания

  • https://github.com/ImageMagick/ImageMagick/issues/733

  • ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/7f2d6fe34d695d3445e2d50937db5541a1b76bde

  • https://github.com/ImageMagick/ImageMagick/commit/c6409227c430f114b6425337e64b848535b62e0b

EPSS

Процентиль: 82%
0.01705
Низкий

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 8 лет назад

A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file.

CVSS3: 3.3
redhat
больше 8 лет назад

A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file.

CVSS3: 8.8
nvd
больше 8 лет назад

A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file.

CVSS3: 8.8
github
больше 3 лет назад

A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file.

suse-cvrf
почти 8 лет назад

Security update for GraphicsMagick

EPSS

Процентиль: 82%
0.01705
Низкий