CVE-2017-11538: Medium severity imagemagick vulnerability
Published Jul 23, 2017
·Updated
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteOnePNGImage() function in coders/png.c.
Affected Software
1 affected component
ImageMagick=7.0.6-1
Event History
Jul 23, 2017
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-11538?
CVE-2017-11538 has been classified as a medium-severity vulnerability due to its potential impact on memory management.
2
How does CVE-2017-11538 affect ImageMagick?
CVE-2017-11538 affects ImageMagick by causing a memory leak when processing specially crafted files with the convert command.
3
Which versions of ImageMagick are affected by CVE-2017-11538?
CVE-2017-11538 specifically affects ImageMagick version 7.0.6-1.
4
How do I fix CVE-2017-11538?
To fix CVE-2017-11538, you should upgrade to a version of ImageMagick that is newer than 7.0.6-1, where this vulnerability has been patched.
5
Can CVE-2017-11538 be exploited remotely?
CVE-2017-11538 can potentially be exploited remotely if an attacker is able to trick a victim into processing a malicious crafted PNG file.