Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-14248

Опубликовано: 11 сент. 2017
Источник: debian
EPSS Низкий

Описание

A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
imagemagicknot-affectedpackage

Примечания

  • https://github.com/ImageMagick/ImageMagick/issues/717

  • https://github.com/ImageMagick/ImageMagick/commit/c5402b6e0fcf8b694ae2af6a6652ebb8ce0ccf46

EPSS

Процентиль: 65%
0.0118
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 9 лет назад

A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file.

CVSS3: 3.3
redhat
почти 9 лет назад

A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file.

CVSS3: 6.5
nvd
почти 9 лет назад

A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file.

CVSS3: 6.5
github
больше 4 лет назад

A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file.

EPSS

Процентиль: 65%
0.0118
Низкий