NetSight
medium6.5

CVE-2017-11540

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex() function, called from the Wri…

Impact

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex() function, called from the WritePICONImage function in coders/xpm.c.

Affected products

VendorProductAffected versions
ImagemagickImagemagick
Version 7.0.6-1

Weakness classification

References