PT-2019-2941
CVE-2019-13304
·
تاريخ النشر
2019-07-05
·
تاريخ التحديث
2026-10-31
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ImageMagick versions 7.0.8-50
Description
The issue is related to a buffer overflow in the WritePNMImage function in the coders/pnm.c file of the ImageMagick console graphic editor. This can be exploited by a remote attacker using a specially crafted image, potentially leading to a denial of service or the execution of arbitrary code.
Recommendations
For ImageMagick version 7.0.8-50, consider disabling the WritePNMImage function in coders/pnm.c as a temporary workaround until a patch is available. Restrict the use of the ImageMagick console graphic editor to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾