CVE-2017-11450: High severity ImageMagick ImageMagick vulnerability
Published Jul 10, 2017
·Updated
coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via JPEG data that is too short.
Affected Software
6 affected componentsFixes available
debian/imagemagick<=8:6.7.7.10-5+deb7u4, <=8:6.9.7.4+dfsg-11, <=8:6.7.7.10-5+deb7u14, <=8:6.8.9.9-5+deb8u9, <=8:6.8.9.9-5+deb8u8
8:6.9.7.4+dfsg-128:6.9.7.4+dfsg-11+deb9u18:6.8.9.9-5+deb8u10
ImageMagick ImageMagick<6.9.9-0
ImageMagick ImageMagick>=7.0.0-0<7.0.6-1
Debian Debian Linux=9.0
Debian Debian Linux=10.0
debian/imagemagick
8:6.9.11.60+dfsg-1.3+deb11u48:6.9.11.60+dfsg-1.3+deb11u98:6.9.11.60+dfsg-1.6+deb12u58:6.9.11.60+dfsg-1.6+deb12u68:7.1.1.43+dfsg1-1+deb13u48:7.1.1.43+dfsg1-1+deb13u58:7.1.2.13+dfsg1-1
Remediation
Patch Available
Patch Available
Patch Available
Event History
Jul 19, 2017
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:24 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·01:18 AM
RemedyDescriptionSeverityAffected Software
Feb 19, 2026
Data Sourced
via Debian·08:15 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2017-11450?
CVE-2017-11450 refers to a vulnerability in ImageMagick before version 7.0.6-1 that allows remote attackers to cause a denial of service or potentially have other unspecified impacts via short JPEG data.
2
How can CVE-2017-11450 be exploited?
CVE-2017-11450 can be exploited by sending specifically crafted JPEG data to ImageMagick, causing the application to crash or potentially leading to other impacts.
3
What is the severity of CVE-2017-11450?
CVE-2017-11450 has a severity level of 8.8 (high).
4
Which versions of ImageMagick are affected by CVE-2017-11450?
ImageMagick versions up to 7.0.6-1 are affected by CVE-2017-11450.
5
How can I fix CVE-2017-11450?
To fix CVE-2017-11450, update ImageMagick to version 7.0.6-1 or later.