Test ID:	1.3.6.1.4.1.25623.1.0.113330
Category:	Denial of Service
Title:	GraphicsMagick < 1.3.32 Multiple Vulnerabilities - Windows
Summary:	GraphicsMagick is prone to multiple vulnerabilities.
Description:	Summary: GraphicsMagick is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - There is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA specification. - There is a heap-based buffer over-read in the ReadBMP Image function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations on 32-bit platforms with customized BMP limits. - The ReadDIBImage of dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colomapping and therefore lacks indexes initialization. Vulnerability Impact: Successful exploitation would allow an attacker to cause a denial of service. Affected Software/OS: GraphicsMagick prior to version 1.3.32. Solution: Update to GraphicsMagick version 1.3.32 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-20184 BugTraq ID: 106229 http://www.securityfocus.com/bid/106229 Debian Security Information: DSA-4640 (Google Search) https://www.debian.org/security/2020/dsa-4640 http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/15d1b5fd003b https://sourceforge.net/p/graphicsmagick/bugs/583/ https://lists.debian.org/debian-lts-announce/2018/12/msg00018.html https://usn.ubuntu.com/4207-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-20185 http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/648e3977a293 https://sourceforge.net/p/graphicsmagick/bugs/582/ Common Vulnerability Exposure (CVE) ID: CVE-2018-20189 BugTraq ID: 106227 http://www.securityfocus.com/bid/106227 http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/648e2b406589 https://sourceforge.net/p/graphicsmagick/bugs/585/
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.