CVE-2017-11537
Debian Security Advisory 4019-1
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an incorrect bits-per-pixel calculation.
Cuando ImageMagick versión 7.0.6-1 procesa un archivo creado en conversión, conlleva a una excepción de punto flotante (FPE) en la función WritePALMImage() en el archivo coders/palm.c, relacionada con un cálculo incorrecto de bits por píxel.
It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-07-22 CVE Reserved
- 2017-07-23 CVE Published
- 2024-08-05 CVE Updated
- 2024-08-05 First Exploit
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-682: Incorrect Calculation
CAPEC
References (4)
URL | Tag | Source |
---|---|---|
https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html | Mailing List |
|
URL | Date | SRC |
---|---|---|
https://github.com/ImageMagick/ImageMagick/issues/560 | 2024-08-05 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://usn.ubuntu.com/3681-1 | 2019-10-03 | |
https://www.debian.org/security/2017/dsa-4019 | 2019-10-03 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Imagemagick Search vendor "Imagemagick" | Imagemagick Search vendor "Imagemagick" for product "Imagemagick" | 7.0.6-1 Search vendor "Imagemagick" for product "Imagemagick" and version "7.0.6-1" | - |
Affected
|