CVE-2017-11310

Опубликовано: 13 июл. 2017

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

The read_user_chunk_callback function in coders\png.c in ImageMagick 7.0.6-1 Q16 2017-06-21 (beta) has memory leak vulnerabilities via crafted PNG files.

Ссылки

http://www.securityfocus.com/bid/99585
https://github.com/ImageMagick/ImageMagick/commit/8ca35831e91c3db8c6d281d09b605001003bec08
Issue Tracking
Patch
Third Party Advisory
https://github.com/ImageMagick/ImageMagick/issues/517
Issue Tracking
Patch
Third Party Advisory
http://www.securityfocus.com/bid/99585
https://github.com/ImageMagick/ImageMagick/commit/8ca35831e91c3db8c6d281d09b605001003bec08
Issue Tracking
Patch
Third Party Advisory
https://github.com/ImageMagick/ImageMagick/issues/517
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.0039

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-772

Связанные уязвимости

CVE-2017-11310

CVSS3: 8.8

ubuntu

больше 8 лет назад

The read_user_chunk_callback function in coders\png.c in ImageMagick 7.0.6-1 Q16 2017-06-21 (beta) has memory leak vulnerabilities via crafted PNG files.

CVE-2017-11310

CVSS3: 3.3

redhat

больше 8 лет назад

The read_user_chunk_callback function in coders\png.c in ImageMagick 7.0.6-1 Q16 2017-06-21 (beta) has memory leak vulnerabilities via crafted PNG files.

CVE-2017-11310

CVSS3: 8.8

debian

больше 8 лет назад

The read_user_chunk_callback function in coders\png.c in ImageMagick 7 ...

GHSA-fpq2-wc7v-m4hr

CVSS3: 8.8

github

больше 3 лет назад

The read_user_chunk_callback function in coders\png.c in ImageMagick 7.0.6-1 Q16 2017-06-21 (beta) has memory leak vulnerabilities via crafted PNG files.

EPSS

Процентиль: 60%

0.0039

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-772