Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-9135

Опубликовано: 30 мар. 2018
Источник: debian

Описание

In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
imagemagickfixed8:6.9.10.8+dfsg-1package

Примечания

  • https://github.com/ImageMagick/ImageMagick/issues/1009

  • https://github.com/ImageMagick/ImageMagick/commit/361ed689cc8e56fd125f9d0d6508e9eb303bdca6

  • ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/4f7196b0b7539b113f2580b6a77aa496813d8899

  • webp support not enabled, see #806425

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 8 лет назад

In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c.

CVSS3: 3.3
redhat
больше 8 лет назад

In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c.

CVSS3: 8.8
nvd
больше 8 лет назад

In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c.

CVSS3: 8.8
github
больше 4 лет назад

In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c.

suse-cvrf
больше 8 лет назад

Security update for ImageMagick