CVE-2017-12876

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2017-12876

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12876.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-12876

Published

2017-08-28T19:29:00Z

Modified

2025-10-21T04:10:23.186772Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

Heap-based buffer overflow in enhance.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file.

References

Affected packages

Git / github.com/imagemagick/imagemagick

Affected ranges

Type: GIT
Repo: https://github.com/imagemagick/imagemagick
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

1cc6f0ccc92c20c7cab6c4a7335daf29c91f0d8e

Affected versions

7.*

7.0.1-0

7.0.1-1

7.0.1-10

7.0.1-2

7.0.1-3

7.0.1-4

7.0.1-5

7.0.1-6

7.0.1-7

7.0.1-8

7.0.1-9

7.0.2-0

7.0.2-1

7.0.2-10

7.0.2-2

7.0.2-3

7.0.2-4

7.0.2-5

7.0.2-6

7.0.2-7

7.0.2-8

7.0.2-9

7.0.3-0

7.0.3-1

7.0.3-10

7.0.3-2

7.0.3-3

7.0.3-4

7.0.3-5

7.0.3-6

7.0.3-7

7.0.3-8

7.0.3-9

7.0.4-0

7.0.4-1

7.0.4-10

7.0.4-2

7.0.4-3

7.0.4-4

7.0.4-5

7.0.4-6

7.0.4-7

7.0.4-8

7.0.4-9

7.0.5-0

7.0.5-1

7.0.5-10

7.0.5-2

7.0.5-3

7.0.5-4

7.0.5-5

7.0.5-6

7.0.5-7

7.0.5-8

7.0.5-9

7.0.6-0

7.0.6-1

7.0.6-2

7.0.6-3

7.0.6-4

7.0.6-5

Database specific

vanir_signatures

[
    {
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "159720653019756489098112919839395199621",
                "1493601648042703426643190035589463863",
                "225902270912491237414267861518603486020",
                "323469041891454117735811538174404017971",
                "237939550130167628625439668004044370318",
                "55746174173618589623335783024052090295",
                "126857360410016675314037605434420344596",
                "75025569001867592473806576716471535181",
                "289350014631510141006145386212732985509",
                "263222327518072518305032413649559112507",
                "278341161242473877393040767004883379143",
                "255046626632397323301962381349947439945"
            ]
        },
        "target": {
            "file": "MagickCore/enhance.c"
        },
        "source": "https://github.com/imagemagick/imagemagick/commit/1cc6f0ccc92c20c7cab6c4a7335daf29c91f0d8e",
        "id": "CVE-2017-12876-8ac8223f",
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "signature_type": "Function",
        "digest": {
            "function_hash": "138131495163229802714153764407181988231",
            "length": 5982.0
        },
        "target": {
            "file": "MagickCore/enhance.c",
            "function": "ContrastStretchImage"
        },
        "source": "https://github.com/imagemagick/imagemagick/commit/1cc6f0ccc92c20c7cab6c4a7335daf29c91f0d8e",
        "id": "CVE-2017-12876-ab8d9efb",
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "signature_type": "Function",
        "digest": {
            "function_hash": "308998591133831409350954514066461080081",
            "length": 5638.0
        },
        "target": {
            "file": "MagickCore/enhance.c",
            "function": "EqualizeImage"
        },
        "source": "https://github.com/imagemagick/imagemagick/commit/1cc6f0ccc92c20c7cab6c4a7335daf29c91f0d8e",
        "id": "CVE-2017-12876-e18caded",
        "deprecated": false,
        "signature_version": "v1"
    }
]