PT-2019-5852 · Imagemagick+5 · Imagemagick+5
Published
2019-10-13
·
Updated
2024-10-15
·
CVE-2020-25666
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
ImageMagick versions prior to 7.0.9-0
Description
The issue is related to an integer overflow in the
HistogramCompare() function within the MagickCore/histogram.c component of ImageMagick. This overflow can occur during simple math calculations involving rgb values and the count value for a color. The flaw could impact application reliability if ImageMagick processes a crafted input file, potentially leading to a denial of service.Recommendations
For versions prior to 7.0.9-0, update to version 7.0.9-0 or later to resolve the issue. As a temporary workaround, consider restricting the processing of crafted input files until the update is applied.
Exploit
Fix
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Imagemagick
Linuxmint
Suse
Ubuntu