CVE-2017-14607 in ImageMagick

Summary

In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 09/20/2017
• Disclosure: 09/20/2017
• Moderation: VulDB entry created
• Entries: 1: VDB-106882
• CPE: ready
• CWE: CWE-125 (Confirmed)
• CVSS: 7.2
• EPSS: 0.01676
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-14607
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-14607
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-14607/