PT-2019-5881
CVE-2019-14981
·
Published
2019-05-21
·
Updated
2026-10-31
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
ImageMagick versions 7.0.0 through 7.0.8-40
ImageMagick versions 6.0.0 through 6.9.10-40
Description
The issue is related to a divide-by-zero vulnerability in the
MeanShiftImage function. This vulnerability allows an attacker to cause a denial of service by sending a crafted file, potentially leading to a remote disruption of service.Recommendations
For ImageMagick versions 7.0.0 through 7.0.8-40, update to version 7.0.8-41 or later.
For ImageMagick versions 6.0.0 through 6.9.10-40, update to version 6.9.10-41 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾