| Package | Affected versions | Patched versions |
|---|---|---|
| imagemagick | = 6.0.1= 6.0.2= 6.0.2.5= 6.0.3= 6.0.4= 6.0.5= 6.0.6= 6.0.7= 6.0.8= 6.1= 6.1.1.6= 6.1.2= 6.1.3= 6.1.4= 6.1.5= 6.1.6= 6.1.7= 6.1.8= 6.2= 6.2.0.4= 6.2.0.7= 6.2.1= 6.2.2= 6.2.4= 6.2.4.5= 6.2.5= 6.2.6= 6.2.7= 6.2.8 |
Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free