| Package | Affected versions | Patched versions |
|---|---|---|
| imagemagick | = 5.3.3= 5.3.8= 5.4.2.3= 5.4.3= 5.4.4.5= 5.4.7= 5.4.8= 5.4.8.2_1.1.0= 5.5.3_.2_1.2.0= 5.5.4= 5.5.6= 5.5.6.0_20030409= 5.5.7= 5.5.7.15= 6.0= 6.0.1= 6.0.2= 6.0.2.5= 6.0.3= 6.0.4= 6.0.4.4= 6.0.5= 6.0.6= 6.0.6.2= 6.0.7= 6.0.8= 6.1= 6.1.1= 6.1.2= 6.1.3= 6.1.4= 6.1.5= 6.1.6= 6.1.7= 6.1.8= 6.2= 6.2.0.3= 6.2.0.7= 6.2.1= 6.2.2= 6.2.3= 6.2.3.4= 6.2.4= 6.2.4.3= 6.2.4.5= 6.2.5= 6.2.6= 6.2.7= 6.2.8= 6.2.9= 6.2.9.2= 6.3.1= 6.3.2= 6.3.3_3= 6.3.3_5= 6.3.3_6= 6.3.4 |
Off-by-one error in the ReadBlobString function in blob.c in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted image file, which triggers the writing of a '\0' character to an out-of-bounds address.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free