ImageMagick 7.0.8-41 Q16 coders/xwd.c ReadXWDImage XWD Image File divide by zero

Summaryinfo

A vulnerability was found in ImageMagick 7.0.8-41 Q16. It has been rated as problematic. The impacted element is the function ReadXWDImage of the file coders/xwd.c. This manipulation as part of XWD Image File causes divide by zero. This vulnerability is tracked as CVE-2019-11472. The attack is possible to be carried out remotely. No exploit exists.

Detailsinfo

A vulnerability has been found in ImageMagick 7.0.8-41 Q16 (Image Processing Software) and classified as problematic. Affected by this vulnerability is the function ReadXWDImage of the file coders/xwd.c. The manipulation as part of a XWD Image File leads to a divide by zero vulnerability. The CWE definition for the vulnerability is CWE-369. The product divides a value by zero. As an impact it is known to affect availability. The summary by CVE is:

ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (divide-by-zero error) by crafting an XWD image file in which the header indicates neither LSB first nor MSB first.

The bug was discovered 04/14/2019. The weakness was disclosed 04/23/2019 (Website). It is possible to read the advisory at lists.fedoraproject.org. This vulnerability is known as CVE-2019-11472 since 04/23/2019. The attack can be launched remotely. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1499 according to MITRE ATT&CK.

The vulnerability was handled as a non-public zero-day exploit for at least 9 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The entries VDB-133985, VDB-134524 and VDB-134525 are pretty similar. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Image Processing Software

Name

• ImageMagick

Version

• 7.0.8-41 Q16

License

• open-source

Website

• Product: https://www.imagemagick.org/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion