cnvd - cnvd-2021-25970

cnvd-2021-25970

Vulnerability from cnvd

Title: ImageMagick输入验证错误漏洞

Description:

Imagemagick Studio ImageMagick是美国ImageMagick Studio（Imagemagick Studio）公司的一套开源的图像处理软件。该软件可读取、转换或写入多种格式的图片。

ImageMagick 6.9.10-69之前版本存在安全漏洞，该漏洞源于ApplyEvaluateOperator()中有几个区域，size_t转换应该是ssize t转换，当ImageMagick处理精心制作的输入文件时，在某些情况下会导致值超出范围。目前没有详细漏洞细节提供。

Severity: 中

Patch Name: ImageMagick输入验证错误漏洞的补丁

Patch Description:

Imagemagick Studio ImageMagick是美国ImageMagick Studio（Imagemagick Studio）公司的一套开源的图像处理软件。该软件可读取、转换或写入多种格式的图片。

ImageMagick 6.9.10-69之前版本存在安全漏洞，该漏洞源于ApplyEvaluateOperator()中有几个区域，size_t转换应该是ssize t转换，当ImageMagick处理精心制作的输入文件时，在某些情况下会导致值超出范围。目前没有详细漏洞细节提供。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新：https://github.com/ImageMagick/ImageMagick6/commit/3e21bc8a58b4ae38d24c7e283837cc279f35b6a5

Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-27764

Impacted products

Name
ImageMagick Studio ImageMagick <6.9.10-69

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-27764",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2020-27764"
    }
  },
  "description": "Imagemagick Studio ImageMagick\u662f\u7f8e\u56fdImageMagick Studio\uff08Imagemagick Studio\uff09\u516c\u53f8\u7684\u4e00\u5957\u5f00\u6e90\u7684\u56fe\u50cf\u5904\u7406\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u53ef\u8bfb\u53d6\u3001\u8f6c\u6362\u6216\u5199\u5165\u591a\u79cd\u683c\u5f0f\u7684\u56fe\u7247\u3002\n\nImageMagick 6.9.10-69\u4e4b\u524d\u7248\u672c\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eApplyEvaluateOperator()\u4e2d\u6709\u51e0\u4e2a\u533a\u57df\uff0csize_t\u8f6c\u6362\u5e94\u8be5\u662fssize t\u8f6c\u6362\uff0c\u5f53ImageMagick\u5904\u7406\u7cbe\u5fc3\u5236\u4f5c\u7684\u8f93\u5165\u6587\u4ef6\u65f6\uff0c\u5728\u67d0\u4e9b\u60c5\u51b5\u4e0b\u4f1a\u5bfc\u81f4\u503c\u8d85\u51fa\u8303\u56f4\u3002\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1ahttps://github.com/ImageMagick/ImageMagick6/commit/3e21bc8a58b4ae38d24c7e283837cc279f35b6a5",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-25970",
  "openTime": "2021-04-08",
  "patchDescription": "Imagemagick Studio ImageMagick\u662f\u7f8e\u56fdImageMagick Studio\uff08Imagemagick Studio\uff09\u516c\u53f8\u7684\u4e00\u5957\u5f00\u6e90\u7684\u56fe\u50cf\u5904\u7406\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u53ef\u8bfb\u53d6\u3001\u8f6c\u6362\u6216\u5199\u5165\u591a\u79cd\u683c\u5f0f\u7684\u56fe\u7247\u3002\r\n\r\nImageMagick 6.9.10-69\u4e4b\u524d\u7248\u672c\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eApplyEvaluateOperator()\u4e2d\u6709\u51e0\u4e2a\u533a\u57df\uff0csize_t\u8f6c\u6362\u5e94\u8be5\u662fssize t\u8f6c\u6362\uff0c\u5f53ImageMagick\u5904\u7406\u7cbe\u5fc3\u5236\u4f5c\u7684\u8f93\u5165\u6587\u4ef6\u65f6\uff0c\u5728\u67d0\u4e9b\u60c5\u51b5\u4e0b\u4f1a\u5bfc\u81f4\u503c\u8d85\u51fa\u8303\u56f4\u3002\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "ImageMagick\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "ImageMagick Studio ImageMagick  \u003c6.9.10-69"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2020-27764",
  "serverity": "\u4e2d",
  "submitTime": "2020-12-04",
  "title": "ImageMagick\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e"
}

CVE-2020-27764 (GCVE-0-2020-27764)

Vulnerability from cvelistv5

Published

2020-12-03 00:00

Modified

2024-08-04 16:18

Severity ?

CWE

CWE-190

Summary

In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t cast should have been a ssize_t cast, which causes out-of-range values under some circumstances when a crafted input file is processed by ImageMagick. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 6.9.10-69.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1894683
	https://github.com/ImageMagick/ImageMagick6/commit/3e21bc8a58b4ae38d24c7e283837cc279f35b6a5
	https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html	mailing-list
	https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html	mailing-list

Impacted products

	Vendor	Product	Version
	n/a	ImageMagick	Version: ImageMagick 6.9.10-69

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T16:18:45.664Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1894683"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/ImageMagick/ImageMagick6/commit/3e21bc8a58b4ae38d24c7e283837cc279f35b6a5"
          },
          {
            "name": "[debian-lts-announce] 20210323 [SECURITY] [DLA 2602-1] imagemagick security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html"
          },
          {
            "name": "[debian-lts-announce] 20230311 [SECURITY] [DLA 3357-1] imagemagick security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ImageMagick",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "ImageMagick 6.9.10-69"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t cast should have been a ssize_t cast, which causes out-of-range values under some circumstances when a crafted input file is processed by ImageMagick. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 6.9.10-69."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-03-11T00:00:00",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1894683"
        },
        {
          "url": "https://github.com/ImageMagick/ImageMagick6/commit/3e21bc8a58b4ae38d24c7e283837cc279f35b6a5"
        },
        {
          "name": "[debian-lts-announce] 20210323 [SECURITY] [DLA 2602-1] imagemagick security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html"
        },
        {
          "name": "[debian-lts-announce] 20230311 [SECURITY] [DLA 3357-1] imagemagick security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2020-27764",
    "datePublished": "2020-12-03T00:00:00",
    "dateReserved": "2020-10-27T00:00:00",
    "dateUpdated": "2024-08-04T16:18:45.664Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted