PT-2009-4346

CVE-2009-1882

·

تاريخ النشر

2009-06-02

·

تاريخ التحديث

2024-06-15

الوصف من

CVSS 2.0
9.3
عالية
المقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: ImageMagick versions 6.5.2-8 GraphicsMagick (affected versions not specified)
Description: The issue is related to an integer overflow in the XMakeImage function, which can be triggered by a crafted TIFF file. This can cause a denial of service (crash) and potentially allow the execution of arbitrary code due to a buffer overflow.
Recommendations: For ImageMagick versions 6.5.2-8, update to a version that fixes the integer overflow in the XMakeImage function. For GraphicsMagick, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
DSA-1858-1
DSA-1903-1
OPENSUSE-SU-2024:10505-1
RHSA-2010:0652
RHSA-2010_0652
RHSA-2010:0653
RHSA-2010_0653
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾