CVE-2013-4298: Buffer Overflow
First published: Tue Sep 10 2013(Updated: )
The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted comment in a GIF image.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ImageMagick ImageMagick | <=6.7.8-7 | |
| ImageMagick ImageMagick | =6.7.8-0 | |
| ImageMagick ImageMagick | =6.7.8-1 | |
| ImageMagick ImageMagick | =6.7.8-2 | |
| ImageMagick ImageMagick | =6.7.8-3 | |
| ImageMagick ImageMagick | =6.7.8-4 | |
| ImageMagick ImageMagick | =6.7.8-5 | |
| ImageMagick ImageMagick | =6.7.8-6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721273
- http://secunia.com/advisories/54581
- http://secunia.com/advisories/54671
- http://www.debian.org/security/2013/dsa-2750
- http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23921
- http://www.imagemagick.org/script/changelog.php
- http://www.ubuntu.com/usn/USN-1949-1
- https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/imagemagick
- canonical/imagemagick imagemagick
- version/imagemagick imagemagick/6.7.8-7
- version/imagemagick imagemagick/6.7.8-0
- version/imagemagick imagemagick/6.7.8-1
- version/imagemagick imagemagick/6.7.8-2
- version/imagemagick imagemagick/6.7.8-3
- version/imagemagick imagemagick/6.7.8-4
- version/imagemagick imagemagick/6.7.8-5
- version/imagemagick imagemagick/6.7.8-6