PT-2019-5859 · Imagemagick+5 · Imagemagick+5
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
ImageMagick versions prior to 7.0.8-68
Description
The issue is related to the
GammaImage() function in /MagickCore/enhance.c of ImageMagick, where a divide-by-zero condition can be triggered depending on the gamma value when processing a crafted input file. This could lead to an impact on application availability. The patch uses the PerceptibleReciprocal() function to prevent the divide-by-zero from occurring.Recommendations
For versions prior to 7.0.8-68, update to ImageMagick 7.0.8-68 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
GammaImage() function until a patch is applied. Additionally, be cautious when processing input files to minimize the risk of exploitation.Exploit
Correção
Divide By Zero
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Imagemagick
Linuxmint
Suse
Ubuntu