Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affected code is used as a library loaded into a process that includes sensitive information, that information sometimes can be leaked via the image data.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ImageMagick 安全漏洞
Vulnerability Description
ImageMagick是美国ImageMagick Studio公司的一套开源的图象处理软件。该软件可读取、转换、写入多种格式的图片。 ImageMagick 7.0.8-9之前版本中的coders/xbm.c文件的‘ReadXBMImage’函数存在安全漏洞,该漏洞源于程序在处理含有负的像素值的XBM文件时没有初始化数据。攻击者可借助图像数据利用该漏洞泄露敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A