Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2017-17880

EPSS 0.41% · P61
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2017-17880

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBP_DECODER_ABI_VERSION check.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
ImageMagick 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ImageMagick是美国ImageMagick Studio公司的一套开源的图象处理软件。该软件可读取、转换、写入多种格式的图片。 ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21版本中的coders/webp.c文件的‘WriteWEBPImage’函数存在缓冲区溢出漏洞。攻击者可利用该漏洞执行代码或造成拒绝服务（基于栈的缓冲区越边界读取）。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2017-17880

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2017-17880

Please Login to view more intelligence information

Same Patch Batch · n/a · 2017-12-24 · 28 CVEs total

CVE-2017-17879ImageMagick 缓冲区错误漏洞
CVE-2017-17874Vanguard Marketplace Digital Products PHP 安全漏洞
CVE-2017-17873Vanguard Marketplace Digital Products PHP SQL注入漏洞
CVE-2017-17872Joomla! JEXTN Video Gallery extension SQL注入漏洞
CVE-2017-17871Joomla! JEXTN Question And Answer extension SQL注入漏洞
CVE-2017-17878Valve Steam Link 安全漏洞
CVE-2017-17877Valve Steam Link 安全漏洞
CVE-2017-17887ImageMagick 安全漏洞
CVE-2017-17886ImageMagick 安全漏洞
CVE-2017-17885ImageMagick 安全漏洞
CVE-2017-17884ImageMagick 安全漏洞
CVE-2017-17883ImageMagick 安全漏洞
CVE-2017-17882ImageMagick 安全漏洞
CVE-2017-17881ImageMagick 安全漏洞
CVE-2017-17849GetGo Download Manager 缓冲区错误漏洞
CVE-2017-17859Samsung Internet Browser 安全漏洞
CVE-2017-17888多款产品Anti-Web 安全漏洞
CVE-2017-17900Dolibarr ERP/CRM SQL注入漏洞
CVE-2017-17899Dolibarr ERP/CRM SQL注入漏洞
CVE-2017-17898Dolibarr ERP/CRM 安全漏洞

Showing top 20 of 28 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2017-17880

No comments yet

Leave a comment