Vulnetix
Try Vulnetix Request Demo
CVE-2019-11009 PUBLISHED

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadXWDImage of coders/xwd.c, which allows attackers to cause a denial of service or information disclosure via a crafted image file.

EPSS 1.33% · 79.8th percentile

Risk Scores

EPSS Score
1.33%
79.8th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSgraphicsmagick0, 1.3.16-1.1ubuntu2, 1.3.16-1.1ubuntu3
Ubuntu:18.04:LTSgraphicsmagick1.3.28-2, 0, 1.3.26-15
Ubuntu:Pro:16.04:LTSgraphicsmagick1.3.23-1ubuntu0.5, 1.3.23-1ubuntu0.6, 1.3.23-1ubuntu0.6+esm1

Timeline

References

Open in Interactive Console →