PT-2018-17827

CVE-2018-6930

·

Published

2018-02-13

·

Updated

2019-10-03

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-22
Description A stack-based buffer over-read in the ComputeResizeImage function in the MagickCore/accelerate.c file allows a remote attacker to cause a denial of service, resulting in an application crash, via a maliciously crafted pict file.
Recommendations For ImageMagick version 7.0.7-22, consider updating to a newer version that contains a fix for this issue, as using a maliciously crafted pict file can cause the application to crash.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾