Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2017-5506

Published: 24/03/2017 Updated: 15/10/2020
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Imagemagick

Vulnerability Summary

Double free vulnerability in magick/profile.c in ImageMagick allows remote malicious users to have unspecified impact via a crafted file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

imagemagick imagemagick

debian debian linux 8.0

debian debian linux 9.0

Vendor Advisories

Ubuntu Security Notice: imagemagick vulnerabilities
Several security issues were fixed in ImageMagick ...
Debian Security Advisories: DSA-3799-1 imagemagick -- security update
This update fixes several vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service or the execution of arbitrary code if malformed TIFF, WPG, IPL, MPC or PSB files are processed For the stable distribution (jessie), these problems have been fixed in version ...
Debian CVElist Bug Report Logs: imagemagick: CVE-2017-5511: coders/psd.c: memory corruption heap overflow
Debian Bug report logs - #851374 imagemagick: CVE-2017-5511: coders/psdc: memory corruption heap overflow Package: imagemagick; Maintainer for imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Source for imagemagick is src:imagemagick (PTS, buildd, popcon) Reported by: Bastien ROUCARI� ...
Debian CVElist Bug Report Logs: imagemagick: CVE-2017-5506: magick/profile.c: double-free memory corruption
Debian Bug report logs - #851383 imagemagick: CVE-2017-5506: magick/profilec: double-free memory corruption Package: imagemagick; Maintainer for imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Source for imagemagick is src:imagemagick (PTS, buildd, popcon) Reported by: Bastien ROUCAR ...
Debian CVElist Bug Report Logs: CVE-2016-8707 ImageMagick Convert Tiff Adobe Deflate Code Execution Vulnerability
Debian Bug report logs - #848139 CVE-2016-8707 ImageMagick Convert Tiff Adobe Deflate Code Execution Vulnerability Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Wed ...
Debian CVElist Bug Report Logs: imagemagick: CVE-2017-5507: coders/mpc.c: memory leak in mpc file handling
Debian Bug report logs - #851382 imagemagick: CVE-2017-5507: coders/mpcc: memory leak in mpc file handling Package: imagemagick; Maintainer for imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Source for imagemagick is src:imagemagick (PTS, buildd, popcon) Reported by: Bastien ROUCARI ...
Debian CVElist Bug Report Logs: imagemagick: CVE-2016-10146: memory leak in caption and label handling
Debian Bug report logs - #851380 imagemagick: CVE-2016-10146: memory leak in caption and label handling Package: imagemagick; Maintainer for imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Source for imagemagick is src:imagemagick (PTS, buildd, popcon) Reported by: Bastien ROUCARIÈS ...
Debian CVElist Bug Report Logs: imagemagick: CVE-2017-5510: coders/psd.c: out-of-bounds write flaw in psd file handling
Debian Bug report logs - #851376 imagemagick: CVE-2017-5510: coders/psdc: out-of-bounds write flaw in psd file handling Package: imagemagick; Maintainer for imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Source for imagemagick is src:imagemagick (PTS, buildd, popcon) Reported by: Ba ...
Debian CVElist Bug Report Logs: imagemagick: CVE-2017-5508: PushQuantumPixel heap buffer-overflow
Debian Bug report logs - #851381 imagemagick: CVE-2017-5508: PushQuantumPixel heap buffer-overflow Package: imagemagick; Maintainer for imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Source for imagemagick is src:imagemagick (PTS, buildd, popcon) Reported by: Bastien ROUCARIÈS <r ...
Red Hat: CVE-2017-5506
Double free vulnerability in magick/profilec in ImageMagick allows remote attackers to have unspecified impact via a crafted file ...

References

CWE-415https://github.com/ImageMagick/ImageMagick/issues/354https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851383http://www.securityfocus.com/bid/95753http://www.openwall.com/lists/oss-security/2017/01/17/5http://www.openwall.com/lists/oss-security/2017/01/16/6https://security.gentoo.org/glsa/201702-09http://www.debian.org/security/2017/dsa-3799https://github.com/ImageMagick/ImageMagick/commit/9a069e0f2e027ec5138f998023cf9cb62c04889fhttps://usn.ubuntu.com/3222-1/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook