CVEvulnerability
CVE-2008-3134
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-07-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-399
Description
Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service (crash, infinite loop, or memory consumption) via (a) unspecified vectors in the (1) AVI, (2) AVS, (3) DCM, (4) EPT, (5) FITS, (6) MTV, (7) PALM, (8) RLA, and (9) TGA decoder readers; and (b) the GetImageCharacteristics function in magick/image.c, as reachable from a crafted (10) PNG, (11) JPEG, (12) BMP, or (13) TIFF file.
Affected configurations
• graphicsmagick graphicsmagick 1.0
• graphicsmagick graphicsmagick 1.0.4
• graphicsmagick graphicsmagick 1.0.6
• graphicsmagick graphicsmagick 1.1
• graphicsmagick graphicsmagick 1.1.3
• graphicsmagick graphicsmagick 1.1.4
• graphicsmagick graphicsmagick 1.1.5
• graphicsmagick graphicsmagick 1.1.6
• graphicsmagick graphicsmagick 1.1.8
• graphicsmagick graphicsmagick 1.1.9
• graphicsmagick graphicsmagick 1.1.10
• graphicsmagick graphicsmagick 1.1.11
• graphicsmagick graphicsmagick 1.1.12
• graphicsmagick graphicsmagick 1.2
• graphicsmagick graphicsmagick 1.2.18
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html lists.opensuse.org
- http://secunia.com/advisories/30879 Vendor Advisory
- http://secunia.com/advisories/32151 secunia.com
- http://sourceforge.net/forum/forum.php?forum_id=841176 sourceforge.net
- http://sourceforge.net/project/shownotes.php?release_id=610253 sourceforge.net
- http://www.securityfocus.com/bid/30055 www.securityfocus.com
- http://www.securitytracker.com/id?1020413 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1984/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43511 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43513 exchange.xforce.ibmcloud.com
- http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html lists.opensuse.org
- http://secunia.com/advisories/30879 Vendor Advisory
- http://secunia.com/advisories/32151 secunia.com
- http://sourceforge.net/forum/forum.php?forum_id=841176 sourceforge.net
- http://sourceforge.net/project/shownotes.php?release_id=610253 sourceforge.net
- http://www.securityfocus.com/bid/30055 www.securityfocus.com
- http://www.securitytracker.com/id?1020413 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1984/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43511 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43513 exchange.xforce.ibmcloud.com