An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read.
{ "vanir_signatures": [ { "signature_version": "v1", "target": { "file": "coders/sun.c" }, "signature_type": "Line", "source": "https://github.com/imagemagick/imagemagick/commit/3007531bfd326c5c1e29cd41d2cd80c166de8528", "deprecated": false, "digest": { "line_hashes": [ "179178196192680898083208185274130627141", "313233156785695662315350098460276820354", "51730324164113967841346982871171085349", "31650435075901187446359043112193854777" ], "threshold": 0.9 }, "id": "CVE-2017-6500-31e78dbb" }, { "signature_version": "v1", "target": { "function": "ReadSUNImage", "file": "coders/sun.c" }, "signature_type": "Function", "source": "https://github.com/imagemagick/imagemagick/commit/3007531bfd326c5c1e29cd41d2cd80c166de8528", "deprecated": false, "digest": { "length": 10208.0, "function_hash": "56495558914728892367596541404940632436" }, "id": "CVE-2017-6500-8c4c113b" } ] }