Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Max Thrane

#45651de 53,635
5.5CVSS total
Vulnerabilidades · 1
PT-2017-1561
5.5
2016-08-25
Imagemagick · Imagemagick · CVE-2016-10046
**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 6.9.5-5 **Description** The issue is related to a heap-based buffer overflow in the `DrawImage` function, which can be exploited by remote attackers to cause a denial of service, resulting in an application crash. This can be achieved through a crafted image file. **Recommendations** For versions prior to 6.9.5-5, update to version 6.9.5-5 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `DrawImage` function until a patch is applied. Avoid processing untrusted or specially crafted image files with the affected function to minimize the risk of exploitation.