CVE-2017-5508

ImageMagick: Heap-buffer-overflow in PushQuantumPixel

Published Mar 24, 2017 CVSS 3.0 · 5.5 Medium EPSS 3.0% KEV · Not listed
Description
Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF file.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-807-1 imagemagick security update
Debian DSA Debian DSA DSA-3799-1 imagemagick security update
EUVD EUVD EUVD-2017-14612 Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF file.
Ubuntu USN Ubuntu USN USN-3222-1 ImageMagick vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
debian
Published
Updated
Aug 5, 2024, 3:04 PM
Reserved
Jan 16, 2017, 12:00 AM
Status
Modified
Published
Mar 24, 2017, 3:59 PM
Modified
Jun 17, 2026, 1:20 AM
Severity
Moderate
Public date
Jan 5, 2017, 12:00 AM