Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-3962

Опубликовано: 19 нояб. 2021
Источник: nvd
CVSS3: 7.8
CVSS2: 6.8
EPSS Низкий

Описание

A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert processes. This flaw allows an attacker to create a specially crafted image that leads to a use-after-free vulnerability when processed by ImageMagick. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:imagemagick:imagemagick:7.1.0-14:*:*:*:*:*:*:*

EPSS

Процентиль: 54%
0.00312
Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-416
CWE-416

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 4 лет назад

A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert processes. This flaw allows an attacker to create a specially crafted image that leads to a use-after-free vulnerability when processed by ImageMagick. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CVSS3: 5.3
redhat
около 4 лет назад

A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert processes. This flaw allows an attacker to create a specially crafted image that leads to a use-after-free vulnerability when processed by ImageMagick. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CVSS3: 7.8
debian
около 4 лет назад

A flaw was found in ImageMagick where it did not properly sanitize cer ...

github
больше 3 лет назад

A flaw was found in ImageMagick 7.1.0-14 where it did not properly sanitize certain input before using it to invoke convert processes. This flaw allows an attacker to create a specially crafted image that leads to a use-after-free vulnerability when processed by ImageMagick. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CVSS3: 7.8
fstec
больше 4 лет назад

Уязвимость консольного графического редактора ImageMagick, связанная с использованием памяти после её освобождения, позволяющая нарушителю оказать влияние на целостность, доступность и конфиденциальность защищаемой информации

EPSS

Процентиль: 54%
0.00312
Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-416
CWE-416