PT-2019-5861 · Imagemagick+5 · Imagemagick+5

Publicado

2019-10-03

·

Atualizado

2024-10-15

·

CVE-2020-27762

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.8-68
Description The issue is related to an integer overflow in the coders/hdr.c component of the ImageMagick console graphic editor. Exploitation of this issue allows a remote attacker to cause a denial of service using a specially crafted file. This could lead to undefined behavior, potentially causing problems related to application availability.
Recommendations For versions prior to 7.0.8-68, update to version 7.0.8-68 or later to resolve the issue. As a temporary workaround, consider restricting the use of the coders/hdr.c component until a patch is available. Avoid processing specially crafted files with ImageMagick until the issue is resolved.

Exploit

Correção

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2019-3182
ALT-PU-2020-1405
BDU:2021-03422
CVE-2020-27762
DLA-2602-1
DLA-3357-1
DLA-3357-2
OESA-2021-1007
OPENSUSE-SU-2021:0136-1
OPENSUSE-SU-2021:0148-1
OPENSUSE-SU-2021_0136-1
OPENSUSE-SU-2021_0148-1
SUSE-SU-2021:0153-1
SUSE-SU-2021:0156-1
SUSE-SU-2021:0199-1
USN-4988-1
USN-5335-1
USN-7068-1

Produtos afetados

Alt Linux
Astra Linux
Imagemagick
Linuxmint
Suse
Ubuntu