heap-use-after-free

Post any defects you find in the released or beta versions of the ImageMagick software here. Include the ImageMagick version, OS, and any command-line required to reproduce the problem. Got a patch for a bug? Post it here.
Post Reply
littleputa
Posts: 6
Joined: 2017-11-15T00:52:05-07:00
Authentication code: 1152

heap-use-after-free

Post by littleputa »

heap-use-after-free
Top
User avatar
magick
Site Admin
Posts: 11064
Joined: 2003-05-31T11:32:55-07:00

Re: heap-use-after-free

Post by magick »

We need a POC to reproduce the problem. We have a description of the problem and the stack trace, but no POC source to reproduce the problem.
Top
littleputa
Posts: 6
Joined: 2017-11-15T00:52:05-07:00
Authentication code: 1152

Re: heap-use-after-free

Post by littleputa »

hello magick:poc already send to you by private message,are you received?
Top
littleputa
Posts: 6
Joined: 2017-11-15T00:52:05-07:00
Authentication code: 1152

Re: heap-use-after-free

Post by littleputa »

sorry,the attachment had not been sent out successfully yesterday.why?
Top
User avatar
dlemstra
Posts: 1570
Joined: 2013-05-04T15:28:54-07:00
Authentication code: 6789
Contact:
Contact dlemstra

Re: heap-use-after-free

Post by dlemstra »

We just pushed a patch to resolve your issue: https://github.com/ImageMagick/ImageMag ... 2eee3fe1cc and https://github.com/ImageMagick/ImageMag ... c13f24c45a
.NET + ImageMagick = Magick.NET https://github.com/dlemstra/Magick.NET, @MagickNET, Donate
Top
littleputa
Posts: 6
Joined: 2017-11-15T00:52:05-07:00
Authentication code: 1152

Re: heap-use-after-free

Post by littleputa »

This vulnerability was discovered by littleputa of NSFOCUS Security Team.
Top
littleputa
Posts: 6
Joined: 2017-11-15T00:52:05-07:00
Authentication code: 1152

Re: heap-use-after-free

Post by littleputa »

CVE-2017-17499
Top
Post Reply

Return to “Bugs”