ImageMagick ReadSIXELImage Heap Buffer Overflow Vulnerability (CVE-2018-5248)

ImageMagick ReadSIXELImage Heap Buffer Overflow Vulnerability (CVE-2018-5248)
ImageMagick ReadSIXELImage Heap Buffer Overflow Vulnerability (CVE-2018-5248)

Release date:
Updated on:

Affected Systems:

ImageMagick 7.0.7-17 Q16

Description:

Bugtraq id: 102431
CVE (CAN) ID: CVE-2018-5248

ImageMagick is an open-source image viewing and editing tool on Unix/Linux platforms.

In ImageMagick 7.0.7-17 Q16, a heap buffer overflow vulnerability exists in coders/sixel. c/ReadSIXELImage implementation. After successful exploitation, attackers can obtain sensitive information.

<* Source: NSFOCUS Security Team
*>

Suggestion:

Vendor patch:

ImageMagick
-----------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://github.com/ImageMagick/ImageMagick/issues/927
Http://www.imagemagick.org/