CVE-2017-11537: Medium severity ImageMagick ImageMagick vulnerability

Published Jul 23, 2017

Updated

Last updated 24 July 2024

Other sources

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can l ...

— Debian

Affected Software

2 affected componentsFixes available

ImageMagick ImageMagick=7.0.6-1

debian/imagemagick

8:6.9.11.60+dfsg-1.6+deb12u118:6.9.11.60+dfsg-1.6+deb12u158:7.1.1.43+dfsg1-1+deb13u128:7.1.1.43+dfsg1-1+deb13u138:7.1.2.34+dfsg1-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/imagemagick to a version that resolves this vulnerability.
Fixed in 8:6.9.11.60+dfsg-1.6+deb12u11Fixed in 8:6.9.11.60+dfsg-1.6+deb12u15Fixed in 8:7.1.1.43+dfsg1-1+deb13u12Fixed in 8:7.1.1.43+dfsg1-1+deb13u13Fixed in 8:7.1.2.34+dfsg1-1

Event History

Jul 23, 2017

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Parent advisories

This vulnerability appears in the following advisories.

DSA-4019

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2017-11537?

CVE-2017-11537 is a vulnerability in ImageMagick 7.0.6-1 that can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an incorrect bits-per-pixel calculation.

What software is affected by CVE-2017-11537?

ImageMagick 7.0.6-1 is affected by CVE-2017-11537.

What is the severity of CVE-2017-11537?

The severity of CVE-2017-11537 is medium (6.5).

How can I fix CVE-2017-11537?

To fix CVE-2017-11537, update ImageMagick to a version that includes the necessary security patches.

Where can I find more information about CVE-2017-11537?

More information about CVE-2017-11537 can be found at the following references: [CVE-2017-11537](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11537), [Ubuntu Security Notice USN-3681-1](https://ubuntu.com/security/notices/USN-3681-1), [NIST CVE-2017-11537](https://nvd.nist.gov/vuln/detail/CVE-2017-11537).