Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service (crash, infinite loop, or memory consumption) via (a) unspecified vectors in the (1) AVI, (2) AVS, (3) DCM, (4) EPT, (5) FITS, (6) MTV, (7) PALM, (8) RLA, and (9) TGA decoder readers; and (b) the GetImageCharacteristics function in magick/image.c, as reachable from a crafted (10) PNG, (11) JPEG, (12) BMP, or (13) TIFF file.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade graphicsmagick | Jul 30, 2024 | Jul 10, 2008 |
| Suse | — | Upgrade GraphicsMagick-c++Upgrade suse-releaseUpgrade libGraphicsMagickWand0Upgrade libGraphicsMagick1Upgrade libgraphicsmagick-develUpgrade GraphicsMagickUpgrade GraphicsMagick-c++-develUpgrade libGraphicsMagick++1Upgrade perl-GraphicsMagickUpgrade graphicsmagick-devel | Feb 17, 2015 | Jul 10, 2008 |
| Ubuntu | — | Upgrade graphicsmagick | Nov 19, 2024 | Jul 10, 2008 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub