Vulnerability Details CVE-2017-6498
An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.7%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.3
References
- http://www.debian.org/security/2017/dsa-3808
- http://www.securityfocus.com/bid/96591
- https://bugs.debian.org/856878
- https://github.com/ImageMagick/ImageMagick/commit/65f75a32a93ae4044c528a987a68366ecd4b46b9
- https://github.com/ImageMagick/ImageMagick/pull/359
- http://www.debian.org/security/2017/dsa-3808
- http://www.securityfocus.com/bid/96591
- https://bugs.debian.org/856878
- https://github.com/ImageMagick/ImageMagick/commit/65f75a32a93ae4044c528a987a68366ecd4b46b9
- https://github.com/ImageMagick/ImageMagick/pull/359
Products affected by CVE-2017-6498
-
cpe:2.3:a:imagemagick:imagemagick:6.9.7
-
cpe:2.3:o:debian:debian_linux:8.0
-
cpe:2.3:o:debian:debian_linux:9.0