CVE:CVE-2019-19948
CNNVD:CNNVD-201912-1035
ImageMagick Studio ImageMagick是美国ImageMagick Studio公司的一套开源的图像处理软件。该软件可读取、转换或写入多种格式的图片。
ImageMagick Studio ImageMagick 7.0.8-43 Q16版本中的coders/sgi.c文件的‘WriteSGIImage’函数存在缓冲区错误漏洞。攻击者可借助特制文件利用该漏洞在系统上执行任意代码。
solution:Upgrade imagemagick imagemagick to a higher version than 7.0.8-43:q16,and avoid the version 7.0.8-43:q16; Upgrade canonical ubuntu_linux to a higher version than 20.04,and avoid the version 20.04; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1