CVE-2017-14173 in ImageMagick
요약 (영어)
In the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRange(depth)+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a very large "max_value" value.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
예약하다
2017. 09. 07.
공개
2017. 09. 07.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 106189 | ImageMagick txt.c ReadTXTImage 메모리 손상 | 190 | 정의되지 않음 | 공식 수정 | CVE-2017-14173 |