https://seclists.org/oss-sec/2023/q2/200: Stack overflow in imagemagick coders/tiff.c
Published May 29, 2023
·Updated
Affected Software
1 affected component
ImageMagick<6.9.12-26
Frequently Asked Questions
1
What is the severity of STACK OVERFLOW in ImageMagick due to crafted TIFF files?
The severity of the stack overflow vulnerability in ImageMagick can be classified as high, as it may allow an attacker to execute arbitrary code.
2
How do I fix the vulnerability STACK OVERFLOW in ImageMagick?
To fix the STACK OVERFLOW vulnerability in ImageMagick, upgrade to a version later than 6.9.12-26.
3
What version of ImageMagick introduced the fix for STACK OVERFLOW?
The fix for the STACK OVERFLOW vulnerability was introduced in ImageMagick version 6.9.12-27 and later.
4
Can crafted TIFF files exploit the STACK OVERFLOW vulnerability in ImageMagick?
Yes, crafted TIFF files can exploit the STACK OVERFLOW vulnerability in ImageMagick, leading to potential code execution.
5
Who reported the STACK OVERFLOW vulnerability in ImageMagick?
The STACK OVERFLOW vulnerability in ImageMagick was originally reported by Muhammad Aldo Firmansyah.