ImageMagick CVE-2017-7942 Denial of Service Vulnerability

ImageMagick is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to consume memory resources and cause a denial-of-service condition.

ImageMagick 7.0.5-4 is vulnerable; other versions may also be affected.

Information

Bugtraq ID: 97946
Class: Failure to Handle Exceptional Conditions
CVE: CVE-2017-7942

Remote: Yes
Local: No
Published: Apr 18 2017 12:00AM
Updated: Apr 21 2017 08:07AM
Credit: Haojun Hou in ADLab of Venustech
Vulnerable: ImageMagick ImageMagick 7.0.5-4
+ Turbolinux Turbolinux Server 7.0
+ Turbolinux Turbolinux Workstation 7.0

Not Vulnerable:

References:

• Fixed memory leak reported in #429 (ImageMagick)
  
• Fixed memory leak reported in #429 (ImageMagick)
  
• ImageMagick Homepage (ImageMagick)
  
• memory leak in avs #429 (ImageMagick)
  

Source: www.securityfocus.com