cve/2017/CVE-2017-12877.md

CVE-2017-12877

Description

Use-after-free vulnerability in the DestroyImage function in image.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file.

POC

Reference

• http://www.openwall.com/lists/oss-security/2017/08/16/2
• https://blogs.gentoo.org/ago/2017/08/10/imagemagick-use-after-free-in-destroyimage-image-c/

Github

No PoCs found on GitHub currently.