CVE-2008-6621

Severity

78%

Complexity

99%

Confidentiality

115%

Unspecified vulnerability in GraphicsMagick before 1.2.3 allows remote attackers to cause a denial of service (crash) via unspecified vectors in DPX images. NOTE: some of these details are obtained from third party information.

CVSS 2.0 Base Score 7.8. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:C).

Overview

First reported 15 years ago

2009-04-06 21:30:00

Last updated 15 years ago

2009-04-14 05:41:00

Affected Software

GraphicsMagick

GraphicsMagick 1.0

1.0

GraphicsMagick 1.0.1

1.0.1

GraphicsMagick 1.0.2

1.0.2

GraphicsMagick 1.0.3

1.0.3

GraphicsMagick 1.0.4

1.0.4

GraphicsMagick 1.0.5

1.0.5

GraphicsMagick 1.0.6

1.0.6

GraphicsMagick 1.1

1.1

GraphicsMagick 1.1.1

1.1.1

GraphicsMagick 1.1.2

1.1.2

GraphicsMagick 1.1.3

1.1.3

GraphicsMagick 1.1.4

1.1.4

GraphicsMagick 1.1.5

1.1.5

GraphicsMagick 1.1.6

1.1.6

GraphicsMagick 1.1.7

1.1.7

GraphicsMagick 1.1.8

1.1.8

GraphicsMagick 1.1.9

1.1.9

GraphicsMagick 1.1.10

1.1.10

GraphicsMagick 1.1.11

1.1.11

GraphicsMagick 1.1.12

1.1.12

GraphicsMagick 1.1.13

1.1.13

GraphicsMagick 1.1.14

1.1.14

GraphicsMagick 1.2

1.2

GraphicsMagick 1.2.1

1.2.1

GraphicsMagick 1.2.2

1.2.2

GraphicsMagick 1.2.18

1.2.18

References

http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/dpx.c

46258

30549

Vendor Advisory

http://sourceforge.net/project/shownotes.php?release_id=604837

ADV-2008-1767