CVE-2018-6930: Medium severity ImageMagick vulnerability

Published Feb 13, 2018

Updated

A stack-based buffer over-read in the ComputeResizeImage function in the MagickCore/accelerate.c file of ImageMagick 7.0.7-22 allows a remote attacker to cause a denial of service (application crash) via a maliciously crafted pict file.

Affected Software

1 affected component

ImageMagick=7.0.7-22

Event History

Feb 13, 2018

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Data Sourced

via NVD·05:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2018-6930?

CVE-2018-6930 is categorized as a high severity vulnerability due to the potential for denial of service and application crash.

How do I fix CVE-2018-6930?

To fix CVE-2018-6930, upgrade ImageMagick to a version later than 7.0.7-22 where this vulnerability has been addressed.

What type of vulnerability is CVE-2018-6930?

CVE-2018-6930 is a stack-based buffer over-read vulnerability.

Who is affected by CVE-2018-6930?

CVE-2018-6930 affects users of ImageMagick version 7.0.7-22 or earlier.

What impact does CVE-2018-6930 have on users?

The impact of CVE-2018-6930 is that a remote attacker can cause a denial of service by exploiting the vulnerability, leading to application crashes.