REDHAT-BUG-2210660: Command Injection
Published May 29, 2023
·Updated
Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding https://github.com/ImageMagick/ImageMagick/issues/6338
Affected Software
1 affected component
ImageMagick
Event History
May 29, 2023
Data Sourced
via Red Hat·05:28 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2210660?
The severity of REDHAT-BUG-2210660 is critical due to the potential for shell command injection.
2
How do I fix REDHAT-BUG-2210660?
To fix REDHAT-BUG-2210660, update ImageMagick to the latest version that addresses the vulnerability.
3
What are the main risks associated with REDHAT-BUG-2210660?
The main risks associated with REDHAT-BUG-2210660 include unauthorized command execution and system compromise.
4
Who is affected by REDHAT-BUG-2210660?
Users of ImageMagick who utilize the VIDEO encoding/decoding options are affected by REDHAT-BUG-2210660.
5
What actions should I take if I am affected by REDHAT-BUG-2210660?
If you are affected by REDHAT-BUG-2210660, discontinue use of the vulnerable features until you can apply the necessary update.