http://bugzilla.opensuse.org/show_bug.cgi?id=1055226 Bug ID: 1055226 Summary: VUL-0: CVE-2017-13132: GraphicsMagick,ImageMagick: In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.coperates on an incorrect data structure in the "dump uncompressedPseudoColor packets" step, which allows attackers to cau Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other URL: https://smash.suse.de/issue/190907 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: pgajdos@suse.com Reporter: meissner@suse.com QA Contact: qa-bugs@suse.de Found By: Security Response Team Blocker: --- CVE-2017-13132 In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the "dump uncompressed PseudoColor packets" step, which allows attackers to cause a denial of service (assertion failure in WriteBlobStream in MagickCore/blob.c) via a crafted file. https://github.com/ImageMagick/ImageMagick/issues/674 -- You are receiving this mail because: You are on the CC list for the bug.