Wind River Support Network

HomeDefectsLIN6-13456
Fixed

LIN6-13456 : Security Advisory - imagemagick - CVE-2017-12675

Created: Aug 11, 2017    Updated: Dec 3, 2018
Resolved Date: Sep 24, 2017
Found In Version: 6.0.0.34
Fix Version: 6.0.0.35
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace

Description

In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in the function ReadImage in MagickCore/constitute.c, which allows attackers to cause a denial of service.

https://nvd.nist.gov/vuln/detail/CVE-2017-12675

Other Downloads


Live chat
Online