Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-11597

Опубликовано: 29 апр. 2019
Источник: nvd
CVSS3: 8.1
CVSS2: 5.8
EPSS Низкий

Описание

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:imagemagick:imagemagick:7.0.8-43:q16:*:*:*:*:*:*

EPSS

Процентиль: 43%
0.00205
Низкий

8.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 6 лет назад

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file.

CVSS3: 8.1
redhat
около 6 лет назад

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file.

CVSS3: 8.1
debian
около 6 лет назад

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in ...

suse-cvrf
почти 6 лет назад

Security update for ImageMagick

suse-cvrf
около 6 лет назад

Security update for ImageMagick

EPSS

Процентиль: 43%
0.00205
Низкий

8.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-125