PT-2019-5848 · Imagemagick+5 · Imagemagick+5
Guilherme De Almeida Suckevicz
+1
·
Published
2019-10-14
·
Updated
2024-10-15
·
CVE-2020-27771
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
ImageMagick versions prior to 7.0.9-0
Description
The issue is related to the RestoreMSCWarning() function in the /coders/pdf.c component of the ImageMagick console graphic editor. It is caused by an integer overflow value. This could allow a remote attacker to cause a denial of service using a specially crafted pdf file. The problem arises when ImageMagick processes a crafted pdf file, potentially leading to an impact on application availability. However, no specific impact was demonstrated in this case.
Recommendations
For ImageMagick versions prior to 7.0.9-0, update to version 7.0.9-0 or later to resolve the issue. As a temporary workaround, consider restricting the processing of crafted pdf files to minimize the risk of exploitation. Avoid using the GetPixelIndex() function in the affected /coders/pdf.c component until the issue is resolved.
Exploit
Fix
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Imagemagick
Linuxmint
Suse
Ubuntu