Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2018-16323

EPSS 87.53% · P99
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2018-16323

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affected code is used as a library loaded into a process that includes sensitive information, that information sometimes can be leaked via the image data.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
ImageMagick 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ImageMagick是美国ImageMagick Studio公司的一套开源的图象处理软件。该软件可读取、转换、写入多种格式的图片。 ImageMagick 7.0.8-9之前版本中的coders/xbm.c文件的‘ReadXBMImage’函数存在安全漏洞，该漏洞源于程序在处理含有负的像素值的XBM文件时没有初始化数据。攻击者可借助图像数据利用该漏洞泄露敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2018-16323

#POC DescriptionSource LinkShenlong Link
1Tool for CVE-2018-16323https://github.com/ttffdd/XBadMannersPOC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-16323

请登录查看更多情报信息。

Same Patch Batch · n/a · 2018-09-01 · 20 CVEs total

CVE-2018-16320idreamsoft iCMS 路径遍历漏洞
CVE-2018-15514Docker for Windows 安全漏洞
CVE-2018-15161libesedb 安全漏洞
CVE-2018-15160libesedb 安全漏洞
CVE-2018-15159libesedb 安全漏洞
CVE-2018-15158libesedb 安全漏洞
CVE-2018-15157libfsclfs 安全漏洞
CVE-2018-16303PDF-XChange Editor 安全漏洞
CVE-2018-16302MediaComm Zip-n-Go 缓冲区错误漏洞
CVE-2018-16324IceWarp Server 安全漏洞
CVE-2018-16325Cagintranet GetSimple CMS 跨站脚本漏洞
CVE-2018-16316Portainer 跨站脚本漏洞
CVE-2018-16315waimai Super Cms 跨站请求伪造漏洞
CVE-2018-16314idreamsoft iCMS 跨站请求伪造漏洞
CVE-2018-16313Bludit 跨站脚本漏洞
CVE-2018-16308WordPress Ninja Forms插件安全漏洞
CVE-2018-16329ImageMagick 安全漏洞
CVE-2018-16328ImageMagick 安全漏洞
CVE-2018-16327Subrion 跨站脚本漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2018-16323

No comments yet

Leave a comment