Описание
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, a crafted multi-frame can result in a heap buffer over-write when encoding it with the SF3 encoder. This issue has been patched in version 7.1.2-25.
A flaw was found in ImageMagick. An attacker can exploit this vulnerability by providing a specially crafted multi-frame image. This can lead to a heap buffer overwrite when the image is encoded with the SF3 encoder, resulting in a denial of service (DoS) for the affected system.
Отчет
Moderate: A heap buffer overwrite flaw in ImageMagick's SF3 encoder can lead to a denial of service when processing a specially crafted multi-frame image. This vulnerability requires local access to the system for exploitation, but does not require user interaction once an attacker can provide the malicious input.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | ImageMagick | Out of support scope | ||
| Red Hat Enterprise Linux 7 | ImageMagick | Out of support scope |
Показывать по
Дополнительная информация
Статус:
EPSS
6.2 Medium
CVSS3
Связанные уязвимости
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, a crafted multi-frame can result in a heap buffer over-write when encoding it with the SF3 encoder. This issue has been patched in version 7.1.2-25.
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, a crafted multi-frame can result in a heap buffer over-write when encoding it with the SF3 encoder. This issue has been patched in version 7.1.2-25.
ImageMagick is free and open-source software used for editing and mani ...
EPSS
6.2 Medium
CVSS3