CVE-2017-18028

Description

In ImageMagick 7.0.7-1 Q16, a memory exhaustion vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allow remote attackers to cause a denial of service via a crafted file.

CVSS Version 3.0

nvd

CVE ID: CVE-2017-18028
Base Score: 6.5
Base Severity: MEDIUM
Vector String:CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS Version 2.0

nvd

CVE ID: CVE-2017-18028
Base Score: 7.1
Base Severity: HIGH
Vector String:AV:N/AC:M/Au:N/C:N/I:N/A:C

Refrence: NVD