PT-2019-5879 · Imagemagick+4 · Imagemagick+4

Yangy-Xiao

·

Publicado

2019-06-26

·

Atualizado

2024-09-04

·

CVE-2019-12978

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.8-34
Description The issue is related to the use of an uninitialized value in the ReadPANGOImage function in coders/pango.c, which can lead to incorrect initialization. This can potentially allow a remote attacker to access confidential information or cause a denial of service.
Recommendations For ImageMagick version 7.0.8-34, consider disabling the ReadPANGOImage function in coders/pango.c as a temporary workaround until a patch is available. Restrict access to the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Initialization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-665

Identificadores relacionados

BDU:2021-03548
CESA-2020_1180
CVE-2019-12978
DLA-2333-1
DSA-4712-1
OPENSUSE-SU-2019:1983-1
OPENSUSE-SU-2019_1983-1
RHSA-2020:1180
RHSA-2020_1180
SUSE-SU-2019:2010-1
SUSE-SU-2019:2106-1
USN-4192-1
USN-6985-1

Produtos afetados

Centos
Imagemagick
Red Hat
Suse
Ubuntu