Back to feed
EUVD-2017-9398 · Published May 18, 2018
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted MIFF image file.
Technologies
Canonical Ubuntu LinuxImagemagick ImagemagickDebian Debian Linux
Weaknesses
CWE-835
CVSS scores
- v3.06.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - v2.07.1
AV:N/AC:M/Au:N/C:N/I:N/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
