CVE-2019-13391

Name

CVE-2019-13391

Description

In ImageMagick 7.0.8-50 Q16, ComplexImages in MagickCore/fourier.c has a heap-based buffer over-read because of incorrect calls to GetCacheViewVirtualPixels.

NVD Severity

high

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

References

Type	URI
Patch	https://github.com/ImageMagick/ImageMagick6/commit/f6ffc702c6eecd963587273a429dcd608c648984
Exploit	https://github.com/ImageMagick/ImageMagick/issues/1588
Patch	https://github.com/ImageMagick/ImageMagick/commit/7c2c5ba5b8e3a0b2b82f56c71dfab74ed4006df7
SUSE	http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html
UBUNTU	https://usn.ubuntu.com/4192-1/
MLIST	https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html

Match rules

CPE URI	Source package	Min version	Max version
`cpe:2.3:a:imagemagick:imagemagick:7.0.8-50:q16::::::`	imagemagick	== None	== 7.0.8-50

Vulnerable and fixed packages

Source package	Branch	Version	Maintainer	Status