Home

CVE-2017-13139

Description

In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
1.094

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Imagemagic (x64) 7.0.6Windows
Multiple vulnerabilities affected in Imagemagick 7.0.6Windows
Multiple Vulnerabilities are affected in ImageMagick 7.0.6Windows
Multiple Vulnerabilities are affected in Imagemagic (x64) 7.0.1-7Windows
Multiple Vulnerabilities are affected in Imagemagic 7.0.1-7Windows
Multiple Vulnerabilities are affected in ImageMagick 7.0.1-7Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234