CVE-2019-11008 PUBLISHED

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image file.

EPSS 2.08% · 83.9th percentile

Risk Scores

EPSS Score
2.08%
83.9th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSgraphicsmagick0, 1.3.16-1.1ubuntu2, 1.3.16-1.1ubuntu3
Ubuntu:18.04:LTSgraphicsmagick1.3.28-2, 0, 1.3.26-15
Ubuntu:Pro:16.04:LTSgraphicsmagick1.3.23-1ubuntu0.5, 1.3.23-1ubuntu0.6, 1.3.23-1ubuntu0.6+esm1

Timeline

References

Open in Interactive Console →