ImageMagick
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*
- < 7.1.2-21
- < 6.9.13-46
A stack buffer overflow vulnerability has been identified in ImageMagick versions prior to 7.1.2-21 and 6.9.13-46. The issue arises when a malicious MIFF file is opened in the display tool. If the user right-clicks a tile to access the Load/Update menu, the overflow is triggered. This vulnerability has been patched in versions 7.1.2-21 and 6.9.13-46.
Exploitation of this vulnerability leads to a stack buffer overflow, which can commonly result in arbitrary code execution or causing a program to crash.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.