CVE-2017-11450

Published: Jul 19, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via JPEG data that is too short.

Affected (4)

Products: Imagemagick: Imagemagick · Debian: Debian Linux

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Imagemagick Imagemagick	Before 6.9.9-0
Imagemagick Imagemagick	From 7.0.0-0 to 7.0.6-1

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 9.0

References (8)

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867894

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://github.com/ImageMagick/ImageMagick/commit/948356eec65aea91995d4b7cc487d197d2c5f602

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://github.com/ImageMagick/ImageMagick/issues/556

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://security-tracker.debian.org/tracker/CVE-2017-11450

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867894

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://github.com/ImageMagick/ImageMagick/commit/948356eec65aea91995d4b7cc487d197d2c5f602

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://github.com/ImageMagick/ImageMagick/issues/556

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://security-tracker.debian.org/tracker/CVE-2017-11450

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

Timeline

No history available yet.