PT-2019-5861 · Imagemagick+5 · Imagemagick+5

Published

2019-10-03

·

Updated

2024-10-15

·

CVE-2020-27762

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.8-68
Description The issue is related to an integer overflow in the coders/hdr.c component of the ImageMagick console graphic editor. Exploitation of this issue allows a remote attacker to cause a denial of service using a specially crafted file. This could lead to undefined behavior, potentially causing problems related to application availability.
Recommendations For versions prior to 7.0.8-68, update to version 7.0.8-68 or later to resolve the issue. As a temporary workaround, consider restricting the use of the coders/hdr.c component until a patch is available. Avoid processing specially crafted files with ImageMagick until the issue is resolved.

Exploit

Fix

Integer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-190

Related Identifiers

ALT-PU-2019-3182
ALT-PU-2020-1405
BDU:2021-03422
CVE-2020-27762
DLA-2602-1
DLA-3357-1
DLA-3357-2
OESA-2021-1007
OPENSUSE-SU-2021:0136-1
OPENSUSE-SU-2021:0148-1
OPENSUSE-SU-2021_0136-1
OPENSUSE-SU-2021_0148-1
SUSE-SU-2021:0153-1
SUSE-SU-2021:0156-1
SUSE-SU-2021:0199-1
USN-4988-1
USN-5335-1
USN-7068-1

Affected Products

Alt Linux
Astra Linux
Imagemagick
Linuxmint
Suse
Ubuntu