Denial of Service in ImageMagick and GraphicsMagick due to Out-of-Bounds Write

CVE-2008-1096

What is CVE-2008-1096?

The load_tile function in the XCF coder for ImageMagick and GraphicsMagick contains a vulnerability that allows attackers to exploit crafted .xcf files. This may result in a denial of service through crashing or potentially executing arbitrary code via an out-of-bounds heap write. The issue is associated with the ScaleCharToQuantum function and highlights the risks of handling untrusted image files without adequate validation.

References