CVE-2017-13758

Summary

CVE	CVE-2017-13758
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2017-08-29 23:29:00 UTC
Updated	2018-06-14 01:29:00 UTC
Description	In ImageMagick 7.0.6-10, there is a heap-based buffer overflow in the TracePoint() function in MagickCore/draw.c.

Risk And Classification

Problem Types: CWE-119

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Imagemagick	Imagemagick	7.0.6-10	All	All	All
Application	Imagemagick	Imagemagick	7.0.6-10	All	All	All

References

Reference	Source	Link	Tags
Debian -- Security Information -- DSA-4040-1 imagemagick	DEBIAN	www.debian.org
USN-3681-1: ImageMagick vulnerabilities \| Ubuntu security notices	UBUNTU	usn.ubuntu.com
Heap buffer overflow in TracePoint() - ImageMagick	CONFIRM	www.imagemagick.org	Issue Tracking, Patch, Vendor Advisory
ImageMagick Heap Overflow in TracePoint() in Processing Files Lets Remote Users Execute Arbitrary Code - SecurityTracker	SECTRACK	www.securitytracker.com
Debian -- Security Information -- DSA-4032-1 imagemagick	DEBIAN	www.debian.org
ImageMagick: Multiple vulnerabilities (GLSA 201711-07) — Gentoo security	GENTOO	security.gentoo.org
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

710460 Gentoo Linux ImageMagick Multiple Vulnerabilities (GLSA 201711-07)