2024-11-19
:
A vulnerability in the OpenBlob function of ImageMagick and GraphicsMagick versions before 1.3.24 allows remote attackers to execute arbitrary code on vulnerable systems. This vulnerability can be exploited by attackers tricking users into opening a specially crafted image file that starts with a pipe character (“|”).
Vulnerability Details:
Platform: ImageMagick, GraphicsMagick
Version: Before 1.3.24 (both platforms)
Vulnerability: Arbitrary Code Execution
Severity: Not specified (CVSS score likely available elsewhere)
Date: Published June 10th, 2016, Last Modified November 19th, 2024 (NVD)
What Undercode Says:
This vulnerability is a serious security risk that could allow attackers to take control of vulnerable systems. Users of ImageMagick and GraphicsMagick should update to versions 1.3.24 or later as soon as possible. Additionally, users should be cautious about opening untrusted image files.
References:
Reported By: Nvd.nist.gov
Undercode AI: https://ai.undercodetesting.com
Image Source:
OpenAI: https://openai.com
Undercode AI DI v2: https://ai.undercode.help