Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2019-13304

Опубликовано: 16 июл. 2019
Источник: redhat
CVSS3: 8.8
EPSS Низкий

Описание

ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment.

A stack-based buffer overflow was discovered in ImageMagick in the way it writes PNM images due to a misplaced assignment. Applications compiled against ImageMagick libraries that accept untrustworthy images or write PNM images may be vulnerable to this flaw. An attacker could abuse this flaw by providing a specially crafted image to make the application crash or potentially execute code.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5ImageMagickOut of support scope
Red Hat Enterprise Linux 6ImageMagickOut of support scope
Red Hat Enterprise Linux 7autotraceFixedRHSA-2020:118031.03.2020
Red Hat Enterprise Linux 7emacsFixedRHSA-2020:118031.03.2020
Red Hat Enterprise Linux 7ImageMagickFixedRHSA-2020:118031.03.2020
Red Hat Enterprise Linux 7inkscapeFixedRHSA-2020:118031.03.2020

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-193
https://bugzilla.redhat.com/show_bug.cgi?id=1730364ImageMagick: stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment

EPSS

Процентиль: 42%
0.00195
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 6 лет назад

ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment.

CVSS3: 7.8
nvd
около 6 лет назад

ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment.

CVSS3: 7.8
debian
около 6 лет назад

ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/p ...

CVSS3: 7.8
github
около 3 лет назад

ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment.

CVSS3: 8.8
fstec
около 6 лет назад

Уязвимость функции WritePNMImage консольного графического редактора ImageMagick, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

EPSS

Процентиль: 42%
0.00195
Низкий

8.8 High

CVSS3

Уязвимость CVE-2019-13304