GraphicsMagick CVE-2017-11642 Denial of Service Vulnerability

Bugtraq ID:	100395
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-11642
Remote:	Yes
Local:	No
Published:	Jul 22 2017 12:00AM
Updated:	Sep 07 2017 01:13PM
Credit:	The vendor reported this issue.
Vulnerable:	GraphicsMagick GraphicsMagick 1.3.26
Not Vulnerable:

GraphicsMagick CVE-2017-11642 Denial of Service Vulnerability

GraphicsMagick is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to cause denial-of-service conditions.

GraphicsMagick 1.3.26 is vulnerable; other versions may also be affected.

GraphicsMagick CVE-2017-11642 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GraphicsMagick CVE-2017-11642 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

GraphicsMagick CVE-2017-11642 Denial of Service Vulnerability

References:

• GraphicsMagick Homepage (GraphicsMagick)
  
• MAP: Fix null pointer dereference or SEGV if input is not colormapped. (Graphicsmagick)