CVE-2017-12433: Medium severity imagemagick vulnerability
In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadPESImage in coders/pes.c, which allows attackers to cause a denial of service, related to ResizeMagickMemory in memory.c.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12433?
The severity of CVE-2017-12433 is medium.
How can attackers exploit CVE-2017-12433?
Attackers can exploit CVE-2017-12433 to cause a denial of service.
Which function in ImageMagick is vulnerable to CVE-2017-12433?
The function ReadPESImage in coders/pes.c is vulnerable to CVE-2017-12433.
How can I fix CVE-2017-12433?
To fix CVE-2017-12433, update ImageMagick to version 8:6.7.7.10-6ubuntu3.11 (for Ubuntu) or version 7.0.6-1 (for ImageMagick).
Where can I find more information about CVE-2017-12433?
You can find more information about CVE-2017-12433 at the following references: [GitHub issue](https://github.com/ImageMagick/ImageMagick/issues/548), [Ubuntu security advisory](https://usn.ubuntu.com/3681-1/), [Launchpad bug](https://launchpad.net/bugs/cve/CVE-2017-12433).