GraphicsMagick CVE-2017-11139 Multiple Denial of Service Vulnerabilities

Bugtraq ID:	99504
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-11139
Remote:	Yes
Local:	No
Published:	Jul 09 2017 12:00AM
Updated:	Jul 09 2017 12:00AM
Credit:	The vendor reported the issue.
Vulnerable:	GraphicsMagick GraphicsMagick 1.3.26
Not Vulnerable:

GraphicsMagick CVE-2017-11139 Multiple Denial of Service Vulnerabilities

GraphicsMagick is prone to multiple denial-of-service vulnerabilities.

An attacker can exploit these issues to crash the affected application, resulting in denial-of-service conditions. Due to the nature of these issues, arbitrary code execution may be possible but this has not been confirmed.

GraphicsMagick 1.3.26 is vulnerable; other versions may be vulnerable.

GraphicsMagick CVE-2017-11139 Multiple Denial of Service Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GraphicsMagick CVE-2017-11139 Multiple Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

GraphicsMagick CVE-2017-11139 Multiple Denial of Service Vulnerabilities

References:

• GraphicsMagick Homepage (GraphicsMagick)
  
• JNG: Fix double frees caused by changeset (Code)