PT-2015-7826
CVE-2015-8900
·
Publicado
2015-12-31
·
Atualizado
2020-07-31
Descrição por
CVSS 3.1
5.5
MédiaMétricasAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
ImageMagick versions 6.x through 7.x
Description
The issue allows remote attackers to cause a denial of service, specifically an infinite loop, by using a crafted HDR file. This is related to the ReadHDRImage function in coders/hdr.c.
Recommendations
For ImageMagick versions 6.x through 7.x, consider disabling the ReadHDRImage function as a temporary workaround until a patch is available. Restrict access to processing HDR files to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾