SUSE CVE-2019-12979

ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage in magick/image.c...

The vulnerability of the SyncImageSettings function in the console-based ImageMagick graphics editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SyncImageSettings function MagickCore/image.c in the ImageMagick console-based graphics editor involves the use of an uninitialized value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protecte...

PT-2019-5178 · Imagemagick +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-34 Description: The issue is related to the use of an uninitialized value in the SyncImageSettings function in MagickCore/image.c, which is also connected to AcquireImage in magick/image.c. This could potentially all...