CVE-2017-11753

The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted Flexible Image Transport System (FITS) file.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2017-07-30

Last modified

2024-08-05

Weaknesses

CWE-125

Affected products

• Imagemagick (Imagemagick)

References

• https://github.com/ImageMagick/ImageMagick/issues/629