Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-34474

Опубликовано: 01 июн. 2023
Источник: redhat
CVSS3: 5.5
EPSS Низкий

Описание

A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service.

A heap-based buffer overflow issue was found in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. This flaw allows a local attacker to trick the user into opening a specially crafted file, triggering an out-of-bounds read error, and allowing an application to crash, resulting in a denial of service.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6ImageMagickNot affected
Red Hat Enterprise Linux 7ImageMagickNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-122
https://bugzilla.redhat.com/show_bug.cgi?id=2214148ImageMagick: heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c

EPSS

Процентиль: 8%
0.00028
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 2 лет назад

A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service.

CVSS3: 5.5
nvd
больше 2 лет назад

A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service.

CVSS3: 5.5
debian
больше 2 лет назад

A heap-based buffer overflow issue was discovered in ImageMagick's Rea ...

suse-cvrf
больше 2 лет назад

Security update for ImageMagick

CVSS3: 5.5
github
больше 2 лет назад

A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service.

EPSS

Процентиль: 8%
0.00028
Низкий

5.5 Medium

CVSS3