CVEvulnerability
CVE-2013-4298
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-09-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-119
Description
The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted comment in a GIF image.
Affected configurations
• imagemagick imagemagick (<= 6.7.8-7)
• imagemagick imagemagick 6.7.8-0
• imagemagick imagemagick 6.7.8-1
• imagemagick imagemagick 6.7.8-2
• imagemagick imagemagick 6.7.8-3
• imagemagick imagemagick 6.7.8-4
• imagemagick imagemagick 6.7.8-5
• imagemagick imagemagick 6.7.8-6
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721273 bugs.debian.org
- http://secunia.com/advisories/54581 Vendor Advisory
- http://secunia.com/advisories/54671 Vendor Advisory
- http://www.debian.org/security/2013/dsa-2750 www.debian.org
- http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23921 Exploit
- http://www.imagemagick.org/script/changelog.php www.imagemagick.org
- http://www.ubuntu.com/usn/USN-1949-1 www.ubuntu.com
- https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248 bugs.launchpad.net
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721273 bugs.debian.org
- http://secunia.com/advisories/54581 Vendor Advisory
- http://secunia.com/advisories/54671 Vendor Advisory
- http://www.debian.org/security/2013/dsa-2750 www.debian.org
- http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23921 Exploit
- http://www.imagemagick.org/script/changelog.php www.imagemagick.org
- http://www.ubuntu.com/usn/USN-1949-1 www.ubuntu.com
- https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248 bugs.launchpad.net