PT-2019-2862 · Imagemagick+1 · Imagemagick+1

Suhwansong · Published 2019-06-21 · Updated 2023-03-02 · CVE-2019-13299

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.8-50

Description The issue is related to a heap-based buffer over-read in the GetPixelChannel function, located in MagickCore/pixel-accessor.h. This can be exploited by a remote attacker using a specially crafted image, potentially leading to a denial of service or disclosure of protected information.

Recommendations For ImageMagick version 7.0.8-50, consider disabling the GetPixelChannel function as a temporary workaround until a patch is available. Restrict access to the pixel-accessor.h module to minimize the risk of exploitation. Avoid using the GetPixelChannel function in the affected ImageMagick version until the issue is resolved.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2019-02830

CVE-2019-13299

OPENSUSE-SU-2019:1983-1

OPENSUSE-SU-2019_1983-1

SUSE-SU-2019:2106-1

Affected Products

Imagemagick

Suse

References · 74

• 🔥 https://github.com/ImageMagick/ImageMagick/issues/1610 · Exploit
• https://github.com/ImageMagick/ImageMagick/commit/8187d2d8fd010d2d6b1a3a8edd935beec404dddc · Patch
• https://osv.dev/vulnerability/ALPINE-CVE-2019-13299 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-13299 · Security Note
• https://bdu.fstec.ru/vul/2019-02830 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2019:2106-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:1983-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-13299 · Vendor Advisory
• https://bugzilla.suse.com/1140666 · Note
• https://suse.com/security/cve/CVE-2019-13311 · Note
• https://suse.com/security/cve/CVE-2019-12977 · Note
• https://bugzilla.suse.com/1140501 · Note
• https://suse.com/security/cve/CVE-2019-12976 · Note
• https://suse.com/security/cve/CVE-2019-13295 · Note