In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead to undefined behavior. This flaw can be triggered by a crafted input file processed by ImageMagick and could impact application availability. The patch uses multiplication in addition to the function PerceptibleReciprocal() in order to prevent such divide-by-zero conditions. This flaw affects ImageMagick versions prior to 7.0.9-0.
Weakness
The product divides a value by zero.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Imagemagick | Imagemagick | 6.9.9-34 (including) | 6.9.10-69 (excluding) |
| Imagemagick | Imagemagick | 7.0.0-0 (including) | 7.0.9-0 (excluding) |
| Imagemagick | Ubuntu | esm-apps/focal | * |
| Imagemagick | Ubuntu | focal | * |
| Imagemagick | Ubuntu | groovy | * |
| Imagemagick | Ubuntu | trusty | * |
| Imagemagick | Ubuntu | upstream | * |
| Imagemagick | Ubuntu | xenial | * |