PT-2018-3224 · Graphicsmagick+3 · Graphicsmagick+3
Probe Fuzzer
·
Publicado
2018-01-13
·
Atualizado
2023-03-27
·
CVE-2018-5685
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
GraphicsMagick version 1.3.27
Description
The issue is related to an infinite loop in the
ReadBMPImage function, which can cause an application hang. This can be exploited by remote attackers to cause a denial of service via a crafted image file with a specific bit-field mask value. The vulnerability can be leveraged using a specially created file.Recommendations
For GraphicsMagick version 1.3.27, consider disabling the
ReadBMPImage function as a temporary workaround until a patch is available. Restrict access to image files that could potentially exploit this issue to minimize the risk of denial of service.Exploit
Correção
DoS
Infinite Loop
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Graphicsmagick
Linuxmint
Suse
Ubuntu