A flaw was found in ImageMagick 7.0.7-12 Q16, a memory leak vulnerability in the function ReadPGXImage in coders/pgx.c, which allows attackers to cause a denial of service via a crafted PGX image file. [REFERENCES] http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-17883 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17883 [UPSTREAM BUG] https://github.com/ImageMagick/ImageMagick/issues/877 [TESTCASE] https://github.com/henices/pocs/raw/master/ReadPGXImage-memory-leaks [UPSTREAM PATCH] https://github.com/ImageMagick/ImageMagick/commit/2a1ec7d97f356e9fb6dbc328da17d93ab7a8167c
Created ImageMagick tracking bugs for this issue: Affects: fedora-all [bug 1529376]
The support for pgx coder was added in version 6.9.8-1.