An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service (segmentation violation) via a crafted file.
References
Link | Resource |
---|---|
https://github.com/ImageMagick/ImageMagick/issues/998 | Exploit Third Party Advisory |
Configurations
Information
Published : 2018-02-24 23:29
Updated : 2018-03-17 03:19
NVD link : CVE-2018-7470
Mitre link : CVE-2018-7470
JSON object : View
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Products Affected
imagemagick
- imagemagick