CVE-2017-13145 in ImageMagickinfo

Summary

In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash.

Once again VulDB remains the best source for vulnerability data.

Reservation

08/23/2017

Disclosure

08/23/2017

Entries

1

CPE

ready

CWE

CWE-20

CVSS

5.4

EPSS

0.01329

CTI

0.00

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2017-13145
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2017-13145
CVE Detailshttps://www.cvedetails.com/cve/CVE-2017-13145/

◂ PreviousOverviewNext ▸

Do you need the next level of professionalism?

Upgrade your account now!