Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fq4j-xxf4-7frh

Опубликовано: 04 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (crash) via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read.

The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (crash) via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read.

EPSS

Процентиль: 80%
0.01434
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 13 лет назад

The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (crash) via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read.

redhat
больше 13 лет назад

The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (crash) via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read.

CVSS3: 6.5
nvd
около 13 лет назад

The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (crash) via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read.

CVSS3: 6.5
debian
около 13 лет назад

The GetEXIFProperty function in magick/property.c in ImageMagick befor ...

oracle-oval
больше 13 лет назад

ELSA-2012-0544: ImageMagick security update (MODERATE)

EPSS

Процентиль: 80%
0.01434
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-125