ImageMagick CVE-2017-13134 Heap Buffer Overflow Vulnerability
BID:100476
CVE-2017-13134 |Info
ImageMagick CVE-2017-13134 Heap Buffer Overflow Vulnerability
| Bugtraq ID: | 100476 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2017-13134 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 22 2017 12:00AM |
| Updated: | Aug 22 2017 12:00AM |
| Credit: | bestshow |
| Vulnerable: |
ImageMagick ImageMagick 7.0.6-6 |
| Not Vulnerable: | |
Discussion
ImageMagick CVE-2017-13134 Heap Buffer Overflow Vulnerability
ImageMagick is prone to a heap-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it into an insufficiently sized buffer.
An attacker can exploit this issue to cause denial-of-service condition. Due to the nature of this issue, code execution may be possible but this has not been confirmed.
ImageMagick 7.0.6-6 is vulnerable; other versions may be affected.
ImageMagick is prone to a heap-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it into an insufficiently sized buffer.
An attacker can exploit this issue to cause denial-of-service condition. Due to the nature of this issue, code execution may be possible but this has not been confirmed.
ImageMagick 7.0.6-6 is vulnerable; other versions may be affected.
Exploit / POC
ImageMagick CVE-2017-13134 Heap Buffer Overflow Vulnerability
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.