Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
First Last Prev Next    This bug is not in your last search results.
Bug 1482628 - (CVE-2017-12428) CVE-2017-12428 ImageMagick: Memory leak in the function ReadWMFImage in coders/wmf.c
CVE-2017-12428 ImageMagick: Memory leak in the function ReadWMFImage in coder...
Status: NEW
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
low Severity low
: ---
: ---
Assigned To: Red Hat Product Security
impact=low,public=20170804,reported=2...
: Security
Depends On: 1482655
Blocks:
  Show dependency tree / graph
 
Reported: 2017-08-17 14:31 EDT by Pedro Sampaio
Modified: 2018-06-29 18:26 EDT (History)
6 users (show)

See Also:
Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed:
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

  None (edit)
Description Pedro Sampaio 2017-08-17 14:31:21 EDT 
In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service in CloneDrawInfo in draw.c. 

Upstream bug:

https://github.com/ImageMagick/ImageMagick/issues/544

Upstream patch:

https://github.com/ImageMagick/ImageMagick/commit/b2b48d50300a9fbcd0aa0d9230fd6d7a08f7671e
https://github.com/ImageMagick/ImageMagick/commit/f37d26336bf13737db45e556c25fc098f8a8b277

References:

https://bugzilla.novell.com/show_bug.cgi?id=1052249
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869713
Comment 1 Pedro Sampaio 2017-08-17 15:58:39 EDT 
Created ImageMagick tracking bugs for this issue:

Affects: fedora-all [bug 1482655]
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.