ImageMagick Denial of Service Vulnerability (CNVD-2018-16958)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in ImageMagick version 7.0.8-11 Q16. An attacker can exploit this vulnerabili...

PT-2018-2297 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-11 Q16 Description: The issue is related to a heap-based buffer over-read in the ParseImageResourceBlocks function, located in coders/psd.c. This can be exploited by a remote attacker to cause a denial of service or...