UBUNTU-CVE-2017-14650

A Remote Code Execution vulnerability has been found in the HordeImage library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applicatio...

CVE-2017-14650

CVE-2017-14650 affects Horde_Image (Im backend) using ImageMagick convert; root cause is missing input validation of the index field in _raw() when building the ImageMagick command. Affected are Horde_Image versions 2.0.0 through 2.5.1; fixed in 2.5.2. The vulnerability is contextual: it is not r...