GraphicsMagick 'ExportAlphaQuantumType()' Function Denial Of Service Vulnerability
BID:63002
Info
GraphicsMagick 'ExportAlphaQuantumType()' Function Denial Of Service Vulnerability
| Bugtraq ID: | 63002 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2013-4589 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 30 2013 12:00AM |
| Updated: | Apr 13 2015 09:37PM |
| Credit: | Matt Walkenhorst |
| Vulnerable: |
GraphicsMagick GraphicsMagick 1.3.17-Q8 Gentoo Linux |
| Not Vulnerable: |
GraphicsMagick GraphicsMagick 1.3.18 |
Discussion
GraphicsMagick 'ExportAlphaQuantumType()' Function Denial Of Service Vulnerability
GraphicsMagick is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to crash the application.
Versions prior to GraphicsMagick 1.3.18 are affected.
GraphicsMagick is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to crash the application.
Versions prior to GraphicsMagick 1.3.18 are affected.
Exploit / POC
GraphicsMagick 'ExportAlphaQuantumType()' Function Denial Of Service Vulnerability
To exploit this issue, an attacker must entice an unsuspecting user to open a malicious file with the affected application.
To exploit this issue, an attacker must entice an unsuspecting user to open a malicious file with the affected application.
Solution / Fix
GraphicsMagick 'ExportAlphaQuantumType()' Function Denial Of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
GraphicsMagick 'ExportAlphaQuantumType()' Function Denial Of Service Vulnerability
References:
References:
- CMYK per-channel byte order TIFF crashes gm (Matt Walkenhorst Matt Walkenhorst )
- Fix ExportAlphaQuantumType() for RGBA image and depth of 8 bits. (GraphicsMagick)
- GraphicsMagick Homepage (GraphicsMagick)
- Re: CVE request for graphicsmagick DoS (SecLists.Org)