CVE-2017-11449: High severity imagemagick vulnerability
coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an image received from stdin.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability CVE-2017-11449?
CVE-2017-11449 is a vulnerability in ImageMagick before version 7.0.6-1 that allows remote attackers to cause a denial of service or potentially have other unspecified impact by exploiting its inability to validate blob sizes.
What is the severity of CVE-2017-11449?
The severity of CVE-2017-11449 is high, with a CVSS score of 8.8.
How does CVE-2017-11449 affect ImageMagick?
CVE-2017-11449 affects ImageMagick versions before 7.0.6-1 by not enabling seekable streams, which leads to the vulnerability.
How can I fix CVE-2017-11449?
To fix CVE-2017-11449, update your ImageMagick installation to version 7.0.6-1 or later.
Where can I find more information about CVE-2017-11449?
You can find more information about CVE-2017-11449 on the official ImageMagick GitHub page in the referenced links.