PT-2019-2185 · Imagemagick+4 · Imagemagick+4

Galycannon · Published 2019-03-23 · Updated 2024-10-15 · CVE-2019-9956

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.8-35 Q16

Description The issue is related to a stack-based buffer overflow in the PopHexPixel function. This allows a remote attacker to execute arbitrary code or cause a denial of service by using a specially crafted image file. The exploitation is possible through the PopHexPixel function in the coders/ps.c file.

Recommendations For ImageMagick version 7.0.8-35 Q16, consider disabling the PopHexPixel function as a temporary workaround until a patch is available. Restrict access to the coders/ps.c file to minimize the risk of exploitation. Avoid using the PopHexPixel function in the affected ImageMagick version until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

BDU:2019-01951

CESA-2020_1180

CVE-2019-9956

DLA-1785-1

DSA-4436-1

OPENSUSE-SU-2019:1331-1

OPENSUSE-SU-2019_1320-1

OPENSUSE-SU-2019_1331-1

RHSA-2020:1180

RHSA-2020_1180

SUSE-SU-2019:1019-1

SUSE-SU-2019:1033-1

SUSE-SU-2019:1033-2

USN-4034-1

USN-7068-1

Affected Products

Centos

Imagemagick

Red Hat

Suse

Ubuntu

References · 122

• 🔥 https://github.com/ImageMagick/ImageMagick/issues/1523 · Exploit
• https://osv.dev/vulnerability/USN-7068-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:1033-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-7175 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-27768 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-27763 · Vendor Advisory
• https://debian.org/security/2019/dsa-4436 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-27764 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:1019-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-27754 · Vendor Advisory
• https://usn.ubuntu.com/4034-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-9956 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-14434 · Vendor Advisory