In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted file.
References
Link | Resource |
---|---|
https://github.com/ImageMagick/ImageMagick/issues/491 | Issue Tracking Patch Third Party Advisory |
https://github.com/ImageMagick/ImageMagick/commit/01843366d6a7b96e22ad7bb67f3df7d9fd4d5d74 | Issue Tracking Patch Third Party Advisory |
http://www.securityfocus.com/bid/98943 | Third Party Advisory VDB Entry |
Configurations
Information
Published : 2017-06-07 07:29
Updated : 2019-10-02 17:03
NVD link : CVE-2017-9501
Mitre link : CVE-2017-9501
JSON object : View
CWE
CWE-617
Reachable Assertion
Products Affected
imagemagick
- imagemagick