Test Kennung:	1.3.6.1.4.1.25623.1.0.113330
Kategorie:	Denial of Service
Titel:	GraphicsMagick < 1.3.32 Multiple Vulnerabilities - Windows
Zusammenfassung:	GraphicsMagick is prone to multiple vulnerabilities.
Beschreibung:	Summary: GraphicsMagick is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - There is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA specification. - There is a heap-based buffer over-read in the ReadBMP Image function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations on 32-bit platforms with customized BMP limits. - The ReadDIBImage of dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colomapping and therefore lacks indexes initialization. Vulnerability Impact: Successful exploitation would allow an attacker to cause a denial of service. Affected Software/OS: GraphicsMagick prior to version 1.3.32. Solution: Update to GraphicsMagick version 1.3.32 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-20184 BugTraq ID: 106229 http://www.securityfocus.com/bid/106229 Debian Security Information: DSA-4640 (Google Search) https://www.debian.org/security/2020/dsa-4640 http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/15d1b5fd003b https://sourceforge.net/p/graphicsmagick/bugs/583/ https://lists.debian.org/debian-lts-announce/2018/12/msg00018.html https://usn.ubuntu.com/4207-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-20185 http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/648e3977a293 https://sourceforge.net/p/graphicsmagick/bugs/582/ Common Vulnerability Exposure (CVE) ID: CVE-2018-20189 BugTraq ID: 106227 http://www.securityfocus.com/bid/106227 http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/648e2b406589 https://sourceforge.net/p/graphicsmagick/bugs/585/
Copyright	Copyright (C) 2019 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.