CVE-2019-11474: Medium severity GraphicsMagick Graphicsmagick vulnerability
coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (floating-point exception and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and CVE-2019-11009.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-11474?
The severity of CVE-2019-11474 is medium with a severity value of 6.5.
How does CVE-2019-11474 affect GraphicsMagick?
CVE-2019-11474 affects GraphicsMagick 1.3.31.
How can an attacker exploit CVE-2019-11474?
An attacker can exploit CVE-2019-11474 by crafting a malicious XWD image file that triggers a floating-point exception, leading to a denial of service and application crash.
What is the remedy for CVE-2019-11474 in GraphicsMagick?
The recommended remedy for CVE-2019-11474 in GraphicsMagick is to upgrade to version 1.4 or later.
Are there any known references for CVE-2019-11474?
Yes, you can find references for CVE-2019-11474 at the following links: - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/5402c5cbd8bd - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/944dcbc457f8 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00020.html