DSA-5288: -1 graphicsmagick -- security update
graphicsmagick - security update
Other sources
It was discovered that a buffer overflow in GraphicsMagick, a collection of image processing tools, could potentially result in the execution of arbitrary code when processing a malformed MIFF image.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
graphicsmagickto a version that resolves this vulnerability.Patch DSA-5288-1
Event History
Frequently Asked Questions
What input must an attacker control to trigger the issue?
The attacker needs to cause GraphicsMagick to process a malformed MIFF image. Successful exploitation could result in arbitrary code execution.
Which deployments are exposed?
Deployments using the Debian graphicsmagick package are relevant. Exposure depends on whether GraphicsMagick processes MIFF images, particularly images supplied by untrusted sources.
How can I determine whether my environment may be affected?
Review whether the Debian graphicsmagick package is installed and whether its image-processing workflows accept or process MIFF files. The provided advisory data does not include affected or fixed package versions.