Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade GraphicsMagick-debuginfoUpgrade GraphicsMagick-c++Upgrade GraphicsMagickUpgrade GraphicsMagick-develUpgrade GraphicsMagick-docUpgrade GraphicsMagick-c++-develUpgrade GraphicsMagick-perl | Jul 4, 2024 | Aug 22, 2023 |
| Amazon_linux | — | Upgrade GraphicsMagick | Feb 19, 2024 | Aug 22, 2023 |
| Amazon_linux_2023 | — | Upgrade GraphicsMagick-develUpgrade GraphicsMagick-docUpgrade GraphicsMagick-c++-develUpgrade GraphicsMagickUpgrade GraphicsMagick-c++-debuginfoUpgrade GraphicsMagick-perlUpgrade GraphicsMagick-perl-debuginfoUpgrade GraphicsMagick-debuginfoUpgrade GraphicsMagick-debugsourceUpgrade GraphicsMagick-c++ | Feb 17, 2025 | Aug 22, 2023 |
| Debian | — | Upgrade graphicsmagick | Jul 30, 2024 | Aug 22, 2023 |
| Suse | — | Upgrade libMagickCore-6_Q16-1Upgrade imagemagick-config-7-upstreamUpgrade libmagick-7_q16hdri4-32bitUpgrade libMagick++-develUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-6_Q16-1-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-config-7-SUSEUpgrade libMagick++-7_Q16HDRI4Upgrade ImageMagick-develUpgrade libMagick++-6_Q16-3Upgrade libMagickCore-7_Q16HDRI6Upgrade perl-PerlMagickUpgrade ImageMagick-config-6-SUSEUpgrade libMagickWand-7_Q16HDRI6Upgrade ImageMagickUpgrade libMagickWand-6_Q16-1 | Aug 9, 2024 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub