PT-2026-107984 · Unknown · Imagemagick
CVSS v4.0
6.9
متوسطة
| المتجه | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
ImageMagick versions prior to 6.9.13-55
ImageMagick versions prior to 7.1.2-30
Description
A denial of service issue exists in the handling of XMP profiles (Extensible Metadata Platform, a standard for creating, transferring, and exchanging metadata). A specially crafted profile can cause the process to terminate abruptly instead of raising an exception, allowing attackers to crash applications that process images using the software.
Recommendations
Update to version 6.9.13-55 or later.
Update to version 7.1.2-30 or later.
استغلال
إصلاح
Resource Exhaustion
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Imagemagick