CVE-2017-12434: Medium severity imagemagick vulnerability
Published Aug 4, 2017
·Updated
In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service (assertion failure) in DestroyImageInfo in image.c.
Affected Software
2 affected componentsFixes available
debian/imagemagick
8:6.9.10.23+dfsg-2.1+deb10u18:6.9.10.23+dfsg-2.1+deb10u58:6.9.11.60+dfsg-1.3+deb11u18:6.9.11.60+dfsg-1.68:6.9.12.98+dfsg1-48:6.9.12.98+dfsg1-5
ImageMagick=7.0.6-1
Remediation
Patch Available
Event History
Aug 4, 2017
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-12434?
CVE-2017-12434 has been classified as a denial of service vulnerability that can cause an assertion failure.
2
How do I fix CVE-2017-12434?
To mitigate CVE-2017-12434, update your ImageMagick installation to a version higher than 7.0.6-1.
3
What causes the CVE-2017-12434 vulnerability?
CVE-2017-12434 is caused by a missing NULL check in the ReadMATImage function within ImageMagick's MAT image decoder.
4
Which versions of ImageMagick are affected by CVE-2017-12434?
Versions older than 7.0.6-1 of ImageMagick are vulnerable to CVE-2017-12434.
5
Can CVE-2017-12434 be exploited remotely?
Yes, CVE-2017-12434 can potentially be exploited remotely, leading to a denial of service condition.