Vulnetix
Try Vulnetix Request Demo
CVE-2019-11505 PUBLISHED

In GraphicsMagick from version 1.3.8 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WritePDBImage of coders/pdb.c, which allows an attacker to cause a denial of service or possibly have unspecified other impact via a crafted image file. This is related to MagickBitStreamMSBWrite in magick/bit_stream.c.

EPSS 1.12% · 78.1th percentile

Risk Scores

EPSS Score
1.12%
78.1th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSgraphicsmagick0, 1.3.28-2, 1.3.28-1
Ubuntu:Pro:16.04:LTSgraphicsmagick1.3.23-1ubuntu0.1, 0, 1.3.21-3
Ubuntu:Pro:14.04:LTSgraphicsmagick1.3.18-1ubuntu3.1, 1.3.18-1ubuntu3.1+esm6, 1.3.18-1ubuntu3.1+esm7

Timeline

References

Open in Interactive Console →