Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The TraceStrokePolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles the relationship between the BezierQuantum value and certain strokes data, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ImageMagick 拒绝服务漏洞
Vulnerability Description
ImageMagick是美国ImageMagick Studio公司的一套开源的图象处理软件。该软件可读取、转换、写入多种格式的图片。 ImageMagick 6.9.4-0之前的版本和7.0.1-2之前的7.x版本的MagickCore/draw.c文件中的‘TraceStrokePolygon’函数存在安全漏洞,该漏洞源于程序没有正确处理数据之间的关系。远程攻击者可借助特制的文件利用该漏洞造成拒绝服务(缓冲区溢出和应用程序崩溃)。
CVSS Information
N/A
Vulnerability Type
N/A