PT-2019-5242

CVE-2019-11010

·

Published

2019-04-08

·

Updated

2021-03-09

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions GraphicsMagick versions 1.4 snapshot-20190322 Q8
Description The issue is related to a memory leak in the ReadMPCImage function of the GraphicsMagick graphic editor, which can be exploited by a remote attacker using a specially crafted image file, potentially leading to a denial of service.
Recommendations For GraphicsMagick version 1.4 snapshot-20190322 Q8, consider disabling the ReadMPCImage function until a patch is available to prevent potential denial of service attacks via crafted image files.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2020-2894
ALT-PU-2021-1452
DLA-1755-1
DSA-4640-1
MGASA-2019-0187
OPENSUSE-SU-2019:1272-1
OPENSUSE-SU-2019_1272-1
OPENSUSE-SU-2019:1295-1
USN-4207-1
Found an issue in the description? Have something to add? Feel free to write us 👾