heap-use-after-free

Post any defects you find in the released or beta versions of the ImageMagick software here. Include the ImageMagick version, OS, and any command-line required to reproduce the problem. Got a patch for a bug? Post it here.
Post Reply
littleputa
Posts: 6
Joined: 2017-11-15T00:52:05-07:00
Authentication code: 1152

heap-use-after-free

Post by littleputa »

heap-use-after-free
User avatar
magick
Site Admin
Posts: 11064
Joined: 2003-05-31T11:32:55-07:00

Re: heap-use-after-free

Post by magick »

We need a POC to reproduce the problem. We have a description of the problem and the stack trace, but no POC source to reproduce the problem.
littleputa
Posts: 6
Joined: 2017-11-15T00:52:05-07:00
Authentication code: 1152

Re: heap-use-after-free

Post by littleputa »

hello magick:poc already send to you by private message,are you received?
littleputa
Posts: 6
Joined: 2017-11-15T00:52:05-07:00
Authentication code: 1152

Re: heap-use-after-free

Post by littleputa »

sorry,the attachment had not been sent out successfully yesterday.why?
User avatar
dlemstra
Posts: 1570
Joined: 2013-05-04T15:28:54-07:00
Authentication code: 6789
Contact:

Re: heap-use-after-free

Post by dlemstra »

.NET + ImageMagick = Magick.NET https://github.com/dlemstra/Magick.NET, @MagickNET, Donate
littleputa
Posts: 6
Joined: 2017-11-15T00:52:05-07:00
Authentication code: 1152

Re: heap-use-after-free

Post by littleputa »

This vulnerability was discovered by littleputa of NSFOCUS Security Team.
littleputa
Posts: 6
Joined: 2017-11-15T00:52:05-07:00
Authentication code: 1152

Re: heap-use-after-free

Post by littleputa »

CVE-2017-17499
Post Reply