Bug 626658 (CVE-2017-11751)

Summary:	<media-gfx/imagemagick-7.0.6-4: DoS via crafted file (CVE-2017-11751)
Product:	Gentoo Security	Reporter:	Christopher Díaz Riveros (RETIRED) <chrisadr>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	trivial	CC:	graphics+disabled
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/ImageMagick/ImageMagick/issues/631
Whiteboard:	~3 [noglsa cve]
Package list:		Runtime testing required:	---

Description Christopher Díaz Riveros (RETIRED) gentoo-dev

2017-07-30 20:08:36 UTC

From URL:

Description: The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file.

Comment 1 Christopher Díaz Riveros (RETIRED) gentoo-dev

2017-08-22 20:46:11 UTC

@Security

The bug was already fixed by upstream and tree is clean. The only affected version was non-stable so dropped to ~3, we only need to add CVE.

Thanks

Gentoo Security Padawan
ChrisADR