CVE-2017-12427: Medium severity imagemagick vulnerability
Published Aug 4, 2017
·Updated
The ProcessMSLScript function in coders/msl.c in ImageMagick before 6.9.9-5 and 7.x before 7.0.6-5 allows remote attackers to cause a denial of service (memory leak) via a crafted file, related to the WriteMSLImage function.
Affected Software
59 affected components
ImageMagick<=6.9.9-4
ImageMagick=7.0.1-0
ImageMagick=7.0.1-1
ImageMagick=7.0.1-2
ImageMagick=7.0.1-3
ImageMagick=7.0.1-4
ImageMagick=7.0.1-5
ImageMagick=7.0.1-6
ImageMagick=7.0.1-7
ImageMagick=7.0.1-8
ImageMagick=7.0.1-9
ImageMagick=7.0.1-10
ImageMagick=7.0.2-0
ImageMagick=7.0.2-1
ImageMagick=7.0.2-2
ImageMagick=7.0.2-3
ImageMagick=7.0.2-4
ImageMagick=7.0.2-5
ImageMagick=7.0.2-6
ImageMagick=7.0.2-7
ImageMagick=7.0.2-8
ImageMagick=7.0.2-9
ImageMagick=7.0.2-10
ImageMagick=7.0.3-0
ImageMagick=7.0.3-1
ImageMagick=7.0.3-2
ImageMagick=7.0.3-3
ImageMagick=7.0.3-4
ImageMagick=7.0.3-5
ImageMagick=7.0.3-6
ImageMagick=7.0.3-7
ImageMagick=7.0.3-8
ImageMagick=7.0.3-9
ImageMagick=7.0.3-10
ImageMagick=7.0.4-0
ImageMagick=7.0.4-1
ImageMagick=7.0.4-2
ImageMagick=7.0.4-3
ImageMagick=7.0.4-4
ImageMagick=7.0.4-5
ImageMagick=7.0.4-6
ImageMagick=7.0.4-7
ImageMagick=7.0.4-8
ImageMagick=7.0.4-9
ImageMagick=7.0.4-10
ImageMagick=7.0.5-0
ImageMagick=7.0.5-1
ImageMagick=7.0.5-4
ImageMagick=7.0.5-5
ImageMagick=7.0.5-6
ImageMagick=7.0.5-7
ImageMagick=7.0.5-8
ImageMagick=7.0.5-9
ImageMagick=7.0.5-10
ImageMagick=7.0.6-0
ImageMagick=7.0.6-1
ImageMagick=7.0.6-2
ImageMagick=7.0.6-3
ImageMagick=7.0.6-4
Remediation
Patch Available
Event History
Aug 4, 2017
CVE Published
via MITRE·09:00 AM
Data Sourced
via MITRE·09:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-12427?
CVE-2017-12427 is categorized as a denial of service vulnerability due to a memory leak in ImageMagick.
2
How do I fix CVE-2017-12427?
To resolve CVE-2017-12427, update ImageMagick to version 6.9.9-5 or 7.0.6-5 or later.
3
What versions of ImageMagick are affected by CVE-2017-12427?
CVE-2017-12427 affects ImageMagick versions prior to 6.9.9-5 and 7.x prior to 7.0.6-5.
4
What are the implications of CVE-2017-12427?
Exploitation of CVE-2017-12427 allows remote attackers to cause a denial of service through memory leaks.
5
Is there a workaround for CVE-2017-12427?
The best course of action for CVE-2017-12427 is to update to a patched version, as no specific workarounds are effective.