CVE-2017-14505

DrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick 7.0.7-1 mishandles certain NULL arrays, which allows attackers to perform Denial of Service (NULL…

published September 17, 2017

CVSS
—
EPSS
1%
Percentile
73.7
In the wild
Unconfirmed
What it is

DrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick 7.0.7-1 mishandles certain NULL arrays, which allows attackers to perform Denial of Service (NULL pointer dereference and application crash in AcquireQuantumMemory within MagickCore/memory.c) by providing a crafted Image File as input.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01485 · 73.7th percentile
Published
2017-09-17T19:00Z
EPSS history
Timeline
  • 17 SEP 19:00Z
    DrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick 7.0.7-1 mishandles certain NULL arrays, which allows attackers to perform Denial of Service (NULL…
    cvelistv5