First Last Prev Next    This bug is not in your last search results.
Bug 1028071 - (CVE-2017-6501) VUL-0: CVE-2017-6501: GraphicsMagick,ImageMagick: An issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file couldlead to a NULL poin...
(CVE-2017-6501)
VUL-0: CVE-2017-6501: GraphicsMagick,ImageMagick: An issue was discovered in ...
Status: RESOLVED WORKSFORME
Classification: Novell Products
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents
unspecified
Other openSUSE 42.1
: P3 - Medium : Normal
: ---
Assigned To: Petr Gajdos
Security Team bot
https://smash.suse.de/issue/181229/
:
Depends on:
Blocks:
  Show dependency tree / graph
 
Reported: 2017-03-06 09:51 UTC by Marcus Meissner
Modified: 2017-03-21 09:26 UTC (History)
1 user (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Marcus Meissner 2017-03-06 09:51:02 UTC 
CVE-2017-6501

An issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file could
lead to a NULL pointer dereference.

References:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856881
https://github.com/ImageMagick/ImageMagick/commit/d31fec57e9dfb0516deead2053a856e3c71e9751
Comment 1 Marcus Meissner 2017-03-06 09:56:24 UTC 
sle11 and sle12 imagemagick and graphicsmagick do not contain the affected code.

only opensuse might contain it.
Comment 2 Swamp Workflow Management 2017-03-06 23:00:15 UTC 
bugbot adjusting priority
Comment 3 Petr Gajdos 2017-03-21 09:26:41 UTC 
42.1/GraphicsMagick and 42.2/GraphicsMagick does not look it would be affected also.
First Last Prev Next    This bug is not in your last search results.