Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2019-11008

Опубликовано: 08 апр. 2019
Источник: ubuntu
Приоритет: medium
CVSS2: 6.8
CVSS3: 8.8

Описание

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image file.

РелизСтатусПримечание
bionic

released

1.3.28-2ubuntu0.1
cosmic

ignored

end of life
devel

not-affected

1.4~hg15968-1
disco

ignored

end of life
eoan

not-affected

1.4~hg15968-1
esm-apps/bionic

released

1.3.28-2ubuntu0.1
esm-apps/focal

not-affected

1.4~hg15968-1
esm-apps/jammy

not-affected

1.4~hg15968-1
esm-apps/noble

not-affected

1.4~hg15968-1
esm-apps/xenial

needed

Показывать по

6.8 Medium

CVSS2

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
nvd
почти 7 лет назад

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image file.

CVSS3: 8.8
debian
почти 7 лет назад

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buff ...

CVSS3: 8.8
github
больше 3 лет назад

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image file.

CVSS3: 8.8
fstec
почти 7 лет назад

Уязвимость функции WriteXWDImage графического редактора GraphicsMagick, связанная с записью за границами буфера, позволяющая нарушителю получить доступ к конфиденциальной информации или вызвать отказ в обслуживании

suse-cvrf
почти 7 лет назад

Security update for ImageMagick

6.8 Medium

CVSS2

8.8 High

CVSS3