CVE-2017-7606: Input Validation
coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7606?
CVE-2017-7606 has a medium severity rating due to its potential to cause application crashes and unspecified impacts.
How do I fix CVE-2017-7606?
To fix CVE-2017-7606, update ImageMagick to a version later than 7.0.5-4, where the vulnerability has been resolved.
What software versions are affected by CVE-2017-7606?
CVE-2017-7606 specifically affects ImageMagick version 7.0.5-4.
What type of attack does CVE-2017-7606 enable?
CVE-2017-7606 enables remote attackers to potentially cause denial of service by exploiting crafted image files.
What is the root cause of CVE-2017-7606?
The root cause of CVE-2017-7606 is an undefined behavior issue in the coders/rle.c module of ImageMagick.