Base Score

HIGH8.8

CVE-2018-16412

ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the coders/psd.c ParseImageResourceBlocks function.

VectorNETWORK

Published Bycve@mitre.org

Published DateSep 03, 2018, 19:29

Weakness Type (CWE):CWE-125

CVSS Metrics

Base Score

8.8

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Base Severity

HIGH

Version

3.0

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

REQUIRED

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH

References

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html
http://www.securityfocus.com/bid/105241
https://github.com/ImageMagick/ImageMagick/issues/1250
https://lists.debian.org/debian-lts-announce/2018/10/msg00002.html
https://usn.ubuntu.com/4034-1/
https://www.debian.org/security/2018/dsa-4316

Base Score

HIGH8.8

Weakness Type (CWE):CWE-125

CVSS Metrics

Base Score

8.8

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Base Severity

HIGH

Version

3.0

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

REQUIRED

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH