PT-2019-5846 · Imagemagick+5 · Imagemagick+5
Guilherme De Almeida Suckevicz
+1
·
Published
2019-10-09
·
Updated
2024-10-15
·
CVE-2020-27775
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
ImageMagick versions prior to 7.0.9-0
Description
A flaw was found in ImageMagick in MagickCore/quantum.h, related to an integer overflow value. This issue allows a remote attacker to cause a denial of service using a specially crafted file. The exploitation of this flaw could trigger undefined behavior, potentially leading to an impact on application availability and other problems related to undefined behavior.
Recommendations
For versions prior to 7.0.9-0, update to version 7.0.9-0 or later to resolve the issue. As a temporary workaround, consider restricting the processing of crafted files by ImageMagick until a patch is applied. Avoid using the vulnerable
MagickCore/quantum.h component in ImageMagick until the issue is resolved.Exploit
Fix
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Imagemagick
Linuxmint
Suse
Ubuntu