CVE-2019-11470
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.6%
The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled resource consumption) by crafting a Cineon image with an incorrect claimed image size. This occurs because ReadCINImage in coders/cin.c lacks a check for insufficient image data in a file.
Produtos afetados
n/a · n/aReferências
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00057.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.htmlhttps://github.com/ImageMagick/ImageMagick/commit/e3cdce6fe12193f235b8c0ae5efe6880a25eb957https://github.com/ImageMagick/ImageMagick/issues/1472https://lists.debian.org/debian-lts-announce/2019/10/msg00028.htmlhttps://lists.debian.org/debian-lts-announce/2020/08/msg00030.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/https://usn.ubuntu.com/4034-1/https://www.debian.org/security/2020/dsa-4712