Wind River Support Network

HomeDefectsLIN9-4426

Fixed

LIN9-4426 : Security Advisory - imagemagick - CVE-2017-9262

Created: Jun 14, 2017 Updated: May 29, 2018

Resolved Date: Aug 10, 2017

Found In Version: 9.0.0.7

Fix Version: 9.0.0.8

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.

https://nvd.nist.gov/vuln/detail/CVE-2017-9262

CVEs

CVE-2017-9262