CVE-2017-6497: Null Pointer Dereference
Published Mar 6, 2017
·Updated
An issue was discovered in ImageMagick 6.9.7. A specially crafted psd file could lead to a NULL pointer dereference (thus, a DoS).
Affected Software
2 affected componentsFixes available
debian/imagemagick
8:6.9.11.60+dfsg-1.3+deb11u38:6.9.11.60+dfsg-1.6+deb12u18:6.9.13.12+dfsg1-1
ImageMagick=6.9.7
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.9.11.60+dfsg-1.3+deb11u3Fixed in 8:6.9.11.60+dfsg-1.6+deb12u1Fixed in 8:6.9.13.12+dfsg1-1
Event History
Mar 6, 2017
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·02:59 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-6497?
CVE-2017-6497 has been classified as a denial-of-service vulnerability due to a NULL pointer dereference.
2
How do I fix CVE-2017-6497?
To fix CVE-2017-6497, update ImageMagick to version 6.9.11.60 or higher.
3
What software is affected by CVE-2017-6497?
CVE-2017-6497 specifically affects ImageMagick version 6.9.7.
4
Can CVE-2017-6497 be exploited remotely?
Yes, a specially crafted PSD file can be utilized to exploit CVE-2017-6497, causing a denial of service.
5
What are the symptoms of CVE-2017-6497 being exploited?
Exploitation of CVE-2017-6497 typically results in the crashing of the ImageMagick service.