CVE-2018-12599

8.8HIGH

Key Information

Vendor
Debian
Status
Debian Linux
Ubuntu Linux
Vendor
CVE Published:
20 June 2018

Summary

In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file.

References

https://lists.debian.org/debian-lts-announce/2018/06/msg0...
mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3711-1/
vendor-advisoryx_refsource_UBUNTU
https://github.com/ImageMagick/ImageMagick/issues/1177
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.