CVE-2017-12983

HIGH

ImageMagick 7.0.6-8 - Heap-based Buffer Overflow in ReadSFWImage

Title source: llm

Description

Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.

References (5)

Core 5

Core References

Third Party Advisory vendor-advisory x_refsource_debian

https://www.debian.org/security/2017/dsa-4040

Vendor Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/3681-1/

Third Party Advisory vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/201711-07

Third Party Advisory vendor-advisory x_refsource_debian

https://www.debian.org/security/2017/dsa-4032

Issue Tracking, Patch, Third Party Advisory x_refsource_confirm

https://github.com/ImageMagick/ImageMagick/issues/682

Scores

CVSS v3 8.8

EPSS 0.0028

EPSS Percentile 51.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (1)

imagemagick/imagemagick 7.0.6-8

Published Aug 21, 2017

Tracked Since Feb 18, 2026