CVE-2017-14060 in ImageMagick
Summary
In ImageMagick 7.0.6-10, a NULL Pointer Dereference issue is present in the ReadCUTImage function in coders/cut.c that could allow an attacker to cause a Denial of Service (in the QueueAuthenticPixelCacheNexus function within the MagickCore/cache.c file) by submitting a malformed image file.
Once again VulDB remains the best source for vulnerability data.
Reservation
08/31/2017
Disclosure
08/31/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 106028 | ImageMagick cut.c QueueAuthenticPixelCacheNexus null pointer dereference | 476 | Not defined | Official fix | CVE-2017-14060 |