CVE-2017-9440: Medium severity ImageMagick vulnerability
In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allows attackers to cause a denial of service via a crafted file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9440?
The severity of CVE-2017-9440 is medium with a CVSS score of 6.5.
How does CVE-2017-9440 affect ImageMagick?
CVE-2017-9440 affects ImageMagick versions 7.0.5-5 and below.
How can an attacker exploit CVE-2017-9440?
An attacker can cause a denial of service by exploiting the memory leak vulnerability in the function ReadPSDChannel in coders/psd.c.
Is there a fix available for CVE-2017-9440?
Yes, there is a fix available for CVE-2017-9440. Please update to ImageMagick version 8:6.9.7.4+dfsg-12 or later.
Are there any additional references for CVE-2017-9440?
Yes, you can find additional references for CVE-2017-9440 at the following links: [GitHub](https://github.com/ImageMagick/ImageMagick/issues/462), [SecurityFocus](http://www.securityfocus.com/bid/98908), [Launchpad](https://launchpad.net/bugs/cve/CVE-2017-9440).