Backup of CVE-2023-39978 (No. 2)

• Backup list
• View the diff.
• View the diff current.
• View the diff for visual.
• View the source.
• Go to CVE-2023-39978.
  • 1 (2023-08-09 (Wed) 22:23:57)
  • 2 (2023-08-10 (Thu) 01:20:56)

CVE#imagemagick

ImageMagick6 系の Magick::Draw. DoS 脆弱性

• https://www.cve.org/CVERecord?id=CVE-2023-39978

CloneDrawInfo で image_info を上書きしてメモリリークする。

clone_info->image_info=CloneImageInfo(draw_info->image_info);