CVE-2017-12435

Published: Aug 4, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service.

Affected (1)

Products: Imagemagick: Imagemagick

Imagemagick

1 product

Imagemagick

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Imagemagick Imagemagick	Version 7.0.6-1

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (10)

http://www.securityfocus.com/bid/100152

Source: cve@mitre.org

https://github.com/ImageMagick/ImageMagick/issues/543

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html

Source: cve@mitre.org

https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html

Source: cve@mitre.org

https://usn.ubuntu.com/3681-1/

Source: cve@mitre.org

http://www.securityfocus.com/bid/100152