CVEvulnerability

CVE-2008-6071

10.0 HIGH Published 2009-02-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-02-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Heap-based buffer overflow in the DecodeImage function in coders/pict.c in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted PICT image. NOTE: some of these details are obtained from third party information.

Affected configurations

• graphicsmagick graphicsmagick (<= 1.1.13) • graphicsmagick graphicsmagick 1.0 • graphicsmagick graphicsmagick 1.0.4 • graphicsmagick graphicsmagick 1.0.6 • graphicsmagick graphicsmagick 1.1 • graphicsmagick graphicsmagick 1.1.1 • graphicsmagick graphicsmagick 1.1.2 • graphicsmagick graphicsmagick 1.1.3 • graphicsmagick graphicsmagick 1.1.4 • graphicsmagick graphicsmagick 1.1.5 • graphicsmagick graphicsmagick 1.1.6 • graphicsmagick graphicsmagick 1.1.7 • graphicsmagick graphicsmagick 1.1.8 • graphicsmagick graphicsmagick 1.1.9 • graphicsmagick graphicsmagick 1.1.10 • graphicsmagick graphicsmagick 1.1.11 • graphicsmagick graphicsmagick 1.1.12 • graphicsmagick graphicsmagick 1.2 • graphicsmagick graphicsmagick 1.2.1 • graphicsmagick graphicsmagick 1.2.2

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References