Denial of Service in ImageMagick and GraphicsMagick due to Out-of-Bounds Write
CVE-2008-1096

Currently unrated

Key Information:

Vendor: Imagemagick
Status: Graphicsmagick; Imagemagick
Vendor: CVE Published:; 5 March 2008

🔔 Create Imagemagick Vulnerability Alert

What is CVE-2008-1096?

The load_tile function in the XCF coder for ImageMagick and GraphicsMagick contains a vulnerability that allows attackers to exploit crafted .xcf files. This may result in a denial of service through crashing or potentially executing arbitrary code via an out-of-bounds heap write. The issue is associated with the ScaleCharToQuantum function and highlights the risks of handling untrusted image files without adequate validation.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/41194

vdb-entryx_refsource_XF

http://secunia.com/advisories/32945

third-party-advisoryx_refsource_SECUNIA

http://www.redhat.com/support/errata/RHSA-2008-0145.html

vendor-advisoryx_refsource_REDHAT

EPSS Score

9% chance of being exploited in the next 30 days.

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 5, 2008
Vulnerability Reserved
Feb 28, 2008