CVE-2017-8353: Medium severity imagemagick vulnerability
Published Apr 30, 2017
·Updated
In ImageMagick 7.0.5-5, the ReadPICTImage function in pict.c allows attackers to cause a denial of service (memory leak) via a crafted file.
Affected Software
3 affected components
ImageMagick ImageMagick=7.0.5-5
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Remediation
Patch Available
Event History
Apr 30, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-8353?
CVE-2017-8353 has been classified as a moderate severity vulnerability due to the potential for denial of service through a memory leak.
2
How do I fix CVE-2017-8353?
To fix CVE-2017-8353, update ImageMagick to a later version that addresses the vulnerability.
3
What types of attacks are possible with CVE-2017-8353?
CVE-2017-8353 can be exploited by attackers to induce a denial of service through a specially crafted file.
4
What software versions are affected by CVE-2017-8353?
CVE-2017-8353 affects ImageMagick version 7.0.5-5 and specific Debian Linux versions 8.0 and 9.0.
5
Is there any specific environment where CVE-2017-8353 is more impactful?
CVE-2017-8353 is particularly impactful in environments that process images using vulnerable versions of ImageMagick.