PT-2018-13487 · Imagemagick+3 · Imagemagick+3
Ttffdd
·
Publicado
2018-08-07
·
Atualizado
2021-04-28
·
CVE-2018-16323
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
ImageMagick versions prior to 7.0.8-9
Description
The issue is related to the processing of XBM files with negative pixel values by the ReadXBMImage function in ImageMagick. This can lead to the leakage of sensitive information if the affected code is used as a library in a process that includes such information. The leakage occurs because data is left uninitialized when handling these specific files.
Recommendations
For versions prior to 7.0.8-9, update to version 7.0.8-9 or later to resolve the issue.
Exploit
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Imagemagick
Suse
Ubuntu