PT-2019-5859 · Imagemagick+5 · Imagemagick+5
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
ImageMagick versions prior to 7.0.8-68
Description
The issue is related to the
GammaImage() function in /MagickCore/enhance.c of ImageMagick, where a divide-by-zero condition can be triggered depending on the gamma value when processing a crafted input file. This could lead to an impact on application availability. The patch uses the PerceptibleReciprocal() function to prevent the divide-by-zero from occurring.Recommendations
For versions prior to 7.0.8-68, update to ImageMagick 7.0.8-68 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
GammaImage() function until a patch is applied. Additionally, be cautious when processing input files to minimize the risk of exploitation.Exploit
Fix
Divide By Zero
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Imagemagick
Linuxmint
Suse
Ubuntu