CVE-2017-12877

概要

参考情報

• openwall.com/lists/oss-security/2017/08/16/2 · Mailing List
• blogs.gentoo.org/ago/2017/08/10/imagemagick-use-after-free-in-destroyimage-image-c · Patch
• ImageMagick/ImageMagick commit 04178de · Issue Tracking
• security.gentoo.org/glsa/201711-07 · Third Party Advisory
• usn.ubuntu.com/3681-1 · Third Party Advisory
• debian.org/security/2017/dsa-4040 · Third Party Advisory
• debian.org/security/2017/dsa-4074 · Third Party Advisory

imagemagick のその他の脆弱性

• CVE-2026-119124中 5.5ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause writes beyond the bou…
• CVE-2026-119123高 7.5ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled. Attack…
• CVE-2026-116160低 3.3ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the X11 animate operation when processing craf…
• CVE-2026-116159低 3.3ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of the -cdl (color decision list) option, where …
• CVE-2026-116158中 5.5ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup when an operation f…