Test ID:	1.3.6.1.4.1.25623.1.0.113458
Category:	General
Title:	ImageMagick <= 7.0.8-49 Multiple Vulnerabilities - Windows
Summary:	ImageMagick is prone to multiple vulnerabilities.
Description:	Summary: ImageMagick is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - Memory leak vulnerability in the function ReadBMPImage in coders/bmp.c - Memory leak vulnerability in the function ReadVIFFImage in coders/viff.c - Use of uninitialized value vulnerability in the function ReadCUTImage in coders/cut.c - Integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c - Memory leak vulnerability in the function ReadPSImage in coders/ps.c Vulnerability Impact: Successful exploitation would allow an attacker to crash the application, read sensitive information or execute code on the target machine. Affected Software/OS: ImageMagick through version 7.0.8-49. Solution: Update to version 7.0.8-50. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-13133 https://github.com/ImageMagick/ImageMagick/commit/fe3066122ef72c82415811d25e9e3fad622c0a99 https://github.com/ImageMagick/ImageMagick/issues/1600 SuSE Security Announcement: openSUSE-SU-2019:1983 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html Common Vulnerability Exposure (CVE) ID: CVE-2019-13134 Common Vulnerability Exposure (CVE) ID: CVE-2019-13135 Debian Security Information: DSA-4712 (Google Search) https://www.debian.org/security/2020/dsa-4712 https://github.com/ImageMagick/ImageMagick/commit/cdb383749ef7b68a38891440af8cc23e0115306d https://github.com/ImageMagick/ImageMagick/issues/1599 https://github.com/ImageMagick/ImageMagick6/commit/1e59b29e520d2beab73e8c78aacd5f1c0d76196d https://lists.debian.org/debian-lts-announce/2019/08/msg00021.html https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html https://usn.ubuntu.com/4192-1/ Common Vulnerability Exposure (CVE) ID: CVE-2019-13136 https://github.com/ImageMagick/ImageMagick/commit/fe5f4b85e6b1b54d3b4588a77133c06ade46d891 https://github.com/ImageMagick/ImageMagick/issues/1602 Common Vulnerability Exposure (CVE) ID: CVE-2019-13137 https://github.com/ImageMagick/ImageMagick/commit/35ccb468ee2dcbe8ce9cf1e2f1957acc27f54c34 https://github.com/ImageMagick/ImageMagick/issues/1601 https://github.com/ImageMagick/ImageMagick6/commit/7d11230060fa9c8f67e53c85224daf6648805c7b
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.