Denial of Service Vulnerability in GraphicsMagick by Artifex Software
CVE-2019-11474

6.5MEDIUM

Key Information:

Vendor

Graphicsmagick

Status
Graphicsmagick
Vendor
CVE Published:
23 April 2019

What is CVE-2019-11474?

In GraphicsMagick version 1.3.31, a vulnerability exists in the coders/xwd.c file that allows attackers to create specially crafted XWD image files. When processed, these files may trigger a floating-point exception, leading to a denial of service by crashing the application. This vulnerability poses a risk to systems utilizing GraphicsMagick, necessitating timely updates and patches to mitigate potential exploitation.

References

http://www.graphicsmagick.org/Changelog.html
x_refsource_MISC
http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/944dcb...
x_refsource_MISC
http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/5402c5...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.