CVE-2019-11009

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadXWDImage of coders/xwd.c, which allows attackers to cause a denial of service or information disclosure via a crafted image file.
Configurations

Configuration 1 (hide)

cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-04-08 19:29

Updated : 2024-02-04 20:20


NVD link : CVE-2019-11009

Mitre link : CVE-2019-11009

CVE.ORG link : CVE-2019-11009


JSON object : View

Products Affected

opensuse

  • leap

debian

  • debian_linux

graphicsmagick

  • graphicsmagick
CWE
CWE-125

Out-of-bounds Read