CVE-2017-10928: High severity imagemagick vulnerability
In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue function in coders/svg.c.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-10928?
CVE-2017-10928 is a vulnerability in ImageMagick which allows remote attackers to obtain sensitive information or potentially have other impacts.
What is the severity of CVE-2017-10928?
CVE-2017-10928 has a severity rating of 8.8 (High).
Which software versions are affected by CVE-2017-10928?
ImageMagick versions 7.0.6-0 and earlier are affected by CVE-2017-10928.
How can I fix CVE-2017-10928?
To fix CVE-2017-10928, upgrade to a version of ImageMagick that is not affected.
Where can I find more information about CVE-2017-10928?
You can find more information about CVE-2017-10928 on the GitHub page, Debian security tracker, and SecurityFocus.