SB2017072302 - Multiple vulnerabilities in ImageMagick

Main Vulnerability Database SB2017072302

SB2017072302 - Multiple vulnerabilities in ImageMagick

Published: July 23, 2017 Updated: August 8, 2020

Security Bulletin ID SB2017072302

Severity

High

Patch available

YES

Number of vulnerabilities 6

Exploitation vector Remote access

Highest impact Code execution

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 6 secuirty vulnerabilities.

1) Out-of-bounds read (CVE-ID: CVE-2017-13139)

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk.

2) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2017-13142)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files.

3) Resource exhaustion (CVE-ID: CVE-2017-11526)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

The ReadOneMNGImage function in coders/png.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted file.

4) Input validation error (CVE-ID: CVE-2017-11528)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.

5) Input validation error (CVE-ID: CVE-2017-11529)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

The ReadMATImage function in coders/mat.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.

6) Resource exhaustion (CVE-ID: CVE-2017-11530)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

The ReadEPTImage function in coders/ept.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.

Remediation

Install update from vendor's website.

References