Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service (crash, infinite loop, or memory consumption) via (a) unspecified vectors in the (1) AVI, (2) AVS, (3) DCM, (4) EPT, (5) FITS, (6) MTV, (7) PALM, (8) RLA, and (9) TGA decoder readers; and (b) the GetImageCharacteristics function in magick/image.c, as reachable from a crafted (10) PNG, (11) JPEG, (12) BMP, or (13) TIFF file.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade graphicsmagick | Jul 30, 2024 | Jul 10, 2008 |
| Suse | — | Upgrade GraphicsMagickUpgrade GraphicsMagick-c++-develUpgrade suse-releaseUpgrade libgraphicsmagick-develUpgrade GraphicsMagick-c++Upgrade libGraphicsMagickWand0Upgrade libGraphicsMagick1Upgrade perl-GraphicsMagickUpgrade libGraphicsMagick++1Upgrade graphicsmagick-devel | Feb 17, 2015 | Jul 10, 2008 |
| Ubuntu | — | Upgrade graphicsmagick | Nov 19, 2024 | Jul 10, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub