ImageMagick is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to consume memory resources and cause a denial-of-service condition.
ImageMagick 7.0.5-4 is vulnerable; other versions may also be affected.
Information
Exploit
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
References:
- ImageMagick Homepage (ImageMagick)
- Fixed leak reported in: #427. (Github)
- Fixed leak reported in: #427. (Github)
- memory leak in svg #427 (Github)
- p0cs/memory-leak-in-svg.svg (Github)
