DeutschShown in its original language — a full translation is planned for a future version.
GraphicsMagick: Mehrere Schwachstellen
view advisory published 2019-04-08
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GraphicsMagick ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen oder weitere, nicht spezifizierte, Auswirkungen zu erzielen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-11010US | medium6.5 | — | ||
In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a memory leak in the function ReadMPCImage of coders/mpc.c, which allows attackers to cause a denial of service via a crafted i… | ||||
| CVE-2019-11009US | high8.1 | — | ||
In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadXWDImage of coders/xwd.c, which allows attackers to cause a denial of service… | ||||
| CVE-2019-11008US | high8.8 | — | ||
In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c, which allows remote attackers to cause a denial of… | ||||
| CVE-2019-11007US | high8.1 | — | ||
In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the ReadMNGImage function of coders/png.c, which allows attackers to cause a denial of service… | ||||
| CVE-2019-11006US | critical9.1 | — | ||
In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c, which allows attackers to cause a denial of servi… | ||||
| CVE-2019-11005US | critical9.8 | — | ||
In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a stack-based buffer overflow in the function SVGStartElement of coders/svg.c, which allows remote attackers to cause a denial… | ||||
02
references
External citations — patches, advisories, analysis.
- Einträge in der Mitre Datenbank vom 2019-04-08external
- Einträge in der Mitre Datenbank vom 2019-04-08external
- Einträge in der Mitre Datenbank vom 2019-04-08external
- Einträge in der Mitre Datenbank vom 2019-04-08external
- Einträge in der Mitre Datenbank vom 2019-04-08external
- Einträge in der Mitre Datenbank vom 2019-04-08external
- Ubuntu Security Notice USN-5974-1 vom 2023-03-27external
- Ubuntu Security Notice USN-4207-1 vom 2019-12-03external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan