PT-2019-5192 · Imagemagick+4 · Imagemagick+4

Suhwansong

·

Publicado

2019-07-05

·

Atualizado

2024-10-03

·

CVE-2019-13307

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.8-50
Description The issue is related to a heap-based buffer overflow in the EvaluateImages function of the ImageMagick console graphic editor. This overflow occurs due to mishandling of rows in the MagickCore/statistic.c file. Exploitation of this issue could allow a remote attacker to cause a denial of service.
Recommendations For ImageMagick version 7.0.8-50, consider disabling the EvaluateImages function as a temporary workaround until a patch is available. Restrict access to the affected MagickCore/statistic.c file to minimize the risk of exploitation.

Exploit

Correção

Memory Corruption

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-787CWE-119

Identificadores relacionados

BDU:2020-01865
CESA-2020_1180
CVE-2019-13307
DSA-4712-1
DSA-4715-1
OPENSUSE-SU-2019:1983-1
OPENSUSE-SU-2019_1983-1
RHSA-2020:1180
RHSA-2020_1180
SUSE-SU-2019:2010-1
SUSE-SU-2019:2106-1
USN-4192-1
USN-7053-1

Produtos afetados

Centos
Imagemagick
Red Hat
Suse
Ubuntu