Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-17682

Опубликовано: 14 дек. 2017
Источник: redhat
CVSS3: 3.3

Описание

In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5ImageMagickWill not fix
Red Hat Enterprise Linux 6ImageMagickWill not fix
Red Hat Enterprise Linux 7ImageMagickWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-400
https://bugzilla.redhat.com/show_bug.cgi?id=1526077ImageMagick: Resource exhaustion in ExtractPostscript function in coders/wpg.c

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 8 лет назад

In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.

CVSS3: 6.5
nvd
около 8 лет назад

In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.

CVSS3: 6.5
debian
около 8 лет назад

In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in t ...

CVSS3: 6.5
github
больше 3 лет назад

In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.

CVSS3: 6.5
fstec
около 8 лет назад

Уязвимость функции ExtractPostscript компонента coders/wpg.c консольного графического редактора ImageMagick, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

3.3 Low

CVSS3