| Description: | Summary:
The remote host is missing an update for the Debian 'graphicsmagick' package(s) announced via the DLA-1795-1 advisory.
Vulnerability Insight:
Multiple vulnerabilities have been discovered in graphicsmagick, the image processing toolkit:
CVE-2019-11473
The WriteMATLABImage function (coders/mat.c) is affected by a heap-based buffer overflow. Remote attackers might leverage this vulnerability to cause denial of service or any other unspecified impact via crafted Matlab matrices.
CVE-2019-11474
The WritePDBImage function (coders/pdb.c) is affected by a heap-based buffer overflow. Remote attackers might leverage this vulnerability to cause denial of service or any other unspecified impact via a crafted Palm Database file.
CVE-2019-11505, CVE-2019-11506 The XWD module (coders/xwd.c) is affected by multiple heap-based buffer overflows and arithmetic exceptions. Remote attackers might leverage these various flaws to cause denial of service or any other unspecified impact via crafted XWD files.
For Debian 8 Jessie, these problems have been fixed in version 1.3.20-3+deb8u7.
We recommend that you upgrade your graphicsmagick packages.
Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: [link moved to references]
Affected Software/OS:
'graphicsmagick' package(s) on Debian 8.
Solution:
Please install the updated package(s).
CVSS Score:
6.8
CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
