CVE-2017-5509

    Dashboard / Vulnerabilities / CVE-2017-5509

    CVE-2017-5509

    Published: 24 Mar 2017Last Modified: 7 Aug 2026

    Summary:

    Details: coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write.

    References: http://www.securityfocus.com/bid/95751, https://security.gentoo.org/glsa/201702-09, https://github.com/ImageMagick/ImageMagick/commit/37a1710e2dab6ed91128ea648d654a22fbe2a6af, http://www.openwall.com/lists/oss-security/2017/01/16/6, http://www.openwall.com/lists/oss-security/2017/01/17/5, https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851377, https://github.com/ImageMagick/ImageMagick/commit/d4ec73f866a7c42a2e7f301fcd696e5cb7a7d3ab, https://github.com/ImageMagick/ImageMagick/issues/350

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -74390c5db097bf7ac36f1cfc5f3128b84ff14ebe

    Affected versions

    7.0.4-3
    7.0.4-2
    7.0.4-1
    7.0.4-0
    7.0.3-10
    7.0.3-9
    7.0.3-8
    7.0.3-7
    7.0.3-6
    7.0.3-5
    7.0.3-4
    7.0.3-3
    7.0.3-2
    7.0.3-1
    7.0.3-0
    7.0.2-10
    7.0.2-9
    7.0.2-8
    7.0.2-7
    7.0.2-6
    7.0.2-5
    7.0.2-4
    7.0.2-3
    7.0.2-2
    7.0.2-1
    7.0.2-0
    7.0.1-10
    7.0.1-9
    7.0.1-8
    7.0.1-7
    7.0.1-6
    7.0.1-5
    7.0.1-4
    7.0.1-3
    7.0.1-2
    7.0.1-1
    7.0.1-0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High