CVE-2017-14684

2017-09-2201:29:25

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.4%

JSON

In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service (memory consumption in ResizeMagickMemory in MagickCore/memory.c) via a crafted file.

CPENameOperatorVersion
imagemagickeq7.0.6-6
imagemagickeq7.0.6-3
imagemagickeq7.0.2-2
imagemagickeq7.0.5-10
imagemagickeq7.0.1-0
imagemagickeq7.0.4-8
imagemagickeq7.0.6-5
imagemagickeq7.0.1-10
imagemagickeq7.0.4-9
imagemagickeq7.0.2-0

Name	Operator	Version
imagemagick	eq	7.0.6-6
imagemagick	eq	7.0.6-3
imagemagick	eq	7.0.2-2
imagemagick	eq	7.0.5-10
imagemagick	eq	7.0.1-0
imagemagick	eq	7.0.4-8
imagemagick	eq	7.0.6-5
imagemagick	eq	7.0.1-10
imagemagick	eq	7.0.4-9
imagemagick	eq	7.0.2-0