CVE-2019-11008: Buffer Overflow
In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-11008?
CVE-2019-11008 is a vulnerability in GraphicsMagick 1.4 snapshot-20190322 Q8 that allows remote attackers to cause a denial of service or possibly have other impact via a crafted image file.
How severe is CVE-2019-11008?
CVE-2019-11008 has a severity value of 8.8, which is classified as high.
Which software versions are affected by CVE-2019-11008?
The affected software versions include GraphicsMagick 1.4+really1.3.35-1~deb10u2, 1.4+really1.3.35-1~deb10u3, 1.4+really1.3.36+hg16481-2+deb11u1, 1.4+really1.3.40-4, and 1.4+really1.3.42-1.
How can I fix CVE-2019-11008?
To fix CVE-2019-11008, update to the recommended versions: GraphicsMagick 1.4+really1.3.35-1~deb10u2, 1.4+really1.3.35-1~deb10u3, 1.4+really1.3.36+hg16481-2+deb11u1, 1.4+really1.3.40-4, or 1.4+really1.3.42-1.
Are there any additional references for CVE-2019-11008?
Yes, you can refer to the following links for more information: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/d823d23a474b, http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00093.html, http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00107.html.