CVE-2019-11474: Medium severity GraphicsMagick Graphicsmagick vulnerability
coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (floating-point exception and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and CVE-2019-11009.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/graphicsmagickto a version that resolves this vulnerability.Fixed in 1.4+really1.3.36+hg16481-2+deb11u1Fixed in 1.4+really1.3.40-4+deb12u1Fixed in 1.4+really1.3.45+hg17696-1Fixed in 1.4+really1.3.46-2 - Upgrade
Upgrade
alpine/graphicsmagickto a version that resolves this vulnerability.Fixed in 1.3.32-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2019-11474?
The severity of CVE-2019-11474 is medium with a severity value of 6.5.
How does CVE-2019-11474 affect GraphicsMagick?
CVE-2019-11474 affects GraphicsMagick 1.3.31.
How can an attacker exploit CVE-2019-11474?
An attacker can exploit CVE-2019-11474 by crafting a malicious XWD image file that triggers a floating-point exception, leading to a denial of service and application crash.
What is the remedy for CVE-2019-11474 in GraphicsMagick?
The recommended remedy for CVE-2019-11474 in GraphicsMagick is to upgrade to version 1.4 or later.
Are there any known references for CVE-2019-11474?
Yes, you can find references for CVE-2019-11474 at the following links: - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/5402c5cbd8bd - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/944dcbc457f8 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00020.html