CVE-2017-6501: Null Pointer Dereference
Published Mar 6, 2017
·Updated
An issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file could lead to a NULL pointer dereference.
Affected Software
2 affected componentsFixes available
debian/imagemagick
8:6.9.11.60+dfsg-1.3+deb11u38:6.9.11.60+dfsg-1.6+deb12u18:6.9.13.12+dfsg1-1
ImageMagick=6.9.7
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.9.11.60+dfsg-1.3+deb11u3Fixed in 8:6.9.11.60+dfsg-1.6+deb12u1Fixed in 8:6.9.13.12+dfsg1-1
Event History
Mar 6, 2017
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·02:59 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-6501?
CVE-2017-6501 is classified as a medium severity vulnerability due to its potential for causing application crashes.
2
How do I fix CVE-2017-6501?
To fix CVE-2017-6501, update ImageMagick to version 6.9.11.60 or later.
3
What types of files are affected by CVE-2017-6501?
CVE-2017-6501 specifically affects specially crafted xcf files.
4
What might happen if I am vulnerable to CVE-2017-6501?
If vulnerable to CVE-2017-6501, the application may experience a NULL pointer dereference, leading to crashes.
5
Which versions of ImageMagick are affected by CVE-2017-6501?
ImageMagick version 6.9.7 is affected by CVE-2017-6501.