Bugzilla – Bug 1058220
VUL-0: CVE-2017-14248: ImageMagick: A heap-based buffer over-read in SampleImage() in MagickCore/resize.c could lead to remote denial of service
Last modified: 2020-07-26 05:54:28 UTC
CVE-2017-14248 A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14248 http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-14248.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14248 https://github.com/ImageMagick/ImageMagick/issues/717
BEFORE 12/ImageMagick $ valgrind -q convert 1-im2pdf out.pdf convert: IDAT: invalid code -- missing end-of-block `1-im2pdf' @ error/png.c/MagickPNGErrorHandler/1802. convert: no images defined `out.pdf' @ error/convert.c/ConvertImageCommand/3149. $ 11/ImageMagick $ valgrind -q convert 1-im2pdf out.png convert: invalid literal/lengths set `1-im2pdf'. convert: missing an image filename `out.png'. $ 11/GraphicsMagick $ valgrind -q gm convert 1-im2pdf out.png gm convert: invalid literal/lengths set (1-im2pdf). $ 42.3/GraphicsMagick $ valgrind -q gm convert 1-im2pdf out.pdf gm convert: IDAT: invalid code -- missing end-of-block (1-im2pdf). $ => no issues observed PATCH https://github.com/ImageMagick/ImageMagick/commit/c5402b6e0fcf8b694ae2af6a6652ebb8ce0ccf46 The code is not anywhere. Later comments in the upstream bug confirms it.