CVE-2020-19667
Description
Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7.
References
Exploit
Issue Tracking
Third Party Advisory
CvssV3 impact
BaseSeverity
HIGH
ConfidentialityImpact
HIGH
AttackComplexity
LOW
Scope
UNCHANGED
AttackVector
LOCAL
AvailabilityImpact
HIGH
IntegrityImpact
HIGH
PrivilegesRequired
NONE
BaseScore
7.8
VectorString
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Version
3.1
UserInteraction
REQUIRED
CvssV2 impact
AccessComplexity
MEDIUM
ConfidentialityImpact
PARTIAL
AvailabilityImpact
PARTIAL
IntegrityImpact
PARTIAL
BaseScore
6.8
VectorString
AV:N/AC:M/Au:N/C:P/I:P/A:P
Version
2.0
AccessVector
NETWORK
Authentication
NONE