CVE:CVE-2019-19949
CNNVD:CNNVD-201912-1037
ImageMagick Studio ImageMagick是美国ImageMagick Studio公司的一套开源的图像处理软件。该软件可读取、转换或写入多种格式的图片。
ImageMagick Studio ImageMagick 7.0.8-43 Q16版本中的coders/png.c文件的‘WritePNGImage’函数存在缓冲区错误漏洞。攻击者可借助特制文件利用该漏洞在系统上执行任意代码。
solution:Upgrade imagemagick imagemagick to a higher version than 6.9.10-43,7.0.8-43,and avoid the version [6.9.9-33,6.9.10-43),[7.0.7-23,7.0.8-43); Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade canonical ubuntu_linux to a higher version than 20.04,and avoid the version 20.04; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1