Heap-based Buffer Overflow in ImageMagick and GraphicsMagick Products

CVE-2008-1097

Summary

A heap-based buffer overflow vulnerability exists in the ReadPCXImage function located in the PCX coder module of ImageMagick and GraphicsMagick. This flaw allows remote attackers to exploit the software by crafting a malicious .pcx file. The exploitation leads to incorrect memory allocation for the scanline array, resulting in memory corruption that can cause application crashes or potentially allow remote code execution.

References