CVE:CVE-2019-13454
CNNVD:CNNVD-201907-498
ImageMagick Studio ImageMagick是美国ImageMagick Studio公司的一套开源的图像处理软件。该软件可读取、转换或写入多种格式的图片。
ImageMagick Studio ImageMagick 7.0.8-54 Q16版本中的MagickCore/layer.c文件的‘RemoveDuplicateLayers’函数存在数字错误漏洞。该漏洞源于网络系统或产品未正确计算或转换所产生的数字。攻击者可利用该漏洞导致整数溢出或符号错误等。
solution:Upgrade imagemagick imagemagick to a higher version than 7.0.8-54:q16,and avoid the version 7.0.8-54:q16; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.04,19.10,and avoid the version 16.04,18.04,19.04,19.10; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1