CVE-2017-7619 in ImageMagick

الملخص

بحسب MITRE

In ImageMagick 7.0.4-9, an infinite loop can occur because of a floating-point rounding error in some of the color algorithms. This affects ModulateHSL, ModulateHCL, ModulateHCLp, ModulateHSB, ModulateHSI, ModulateHSV, ModulateHWB, ModulateLCHab, and ModulateLCHuv.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• حجز: 10/04/2017
• إفشاء: 10/04/2017
• الاعتدال: تمت الموافقة
• إدخال: VDB-99560
• CPE: جاهز
• CWE: CWE-835 (مؤكد)
• CVSS: 7.5 (NVD)
• EPSS: 0.01450
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Industry, Homeoffice, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-7619
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-7619
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-7619/