ImageMagick 'ReadDIBImage()' Function Denial of Service Vulnerability

ImageMagick is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause denial-of-service conditions.

ImageMagick 1.3.31 is vulnerable; other versions may also be affected.

Information

Bugtraq ID: 106227
Class: Failure to Handle Exceptional Conditions
CVE: CVE-2018-20189

Remote: Yes
Local: No
Published: Dec 17 2018 12:00AM
Updated: Dec 17 2018 12:00AM
Credit: Augustus Wang
Vulnerable: ImageMagick ImageMagick 1.3.31

Not Vulnerable:

Exploit

The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.

References:

• ImageMagick Homepage (ImageMagick)
  
• #585 Assertion Failure in coders/png.c:7503 ()
  
• ReadDIBImage(): DIB images claiming more than 8-bits per pixel are not colormapp (Image Magick)
  

Source: www.securityfocus.com