CVE-2013-4589

Severity

43%

Complexity

86%

Confidentiality

48%

The ExportAlphaQuantumType function in export.c in GraphicsMagick before 1.3.18 might allow remote attackers to cause a denial of service (crash) via vectors related to exporting the alpha of an 8-bit RGBA image.

The ExportAlphaQuantumType function in export.c in GraphicsMagick before 1.3.18 might allow remote attackers to cause a denial of service (crash) via vectors related to exporting the alpha of an 8-bit RGBA image.

CVSS 2.0 Base Score 4.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:N/A:P).

Overview

First reported 11 years ago

2013-11-23 11:55:00

Last updated 8 years ago

2016-08-26 18:12:00

Affected Software

Novell SUSE Linux Enterprise Software Development Kit 11.0 Service Pack 4

11.0

GraphicsMagick 1.0

1.0

GraphicsMagick 1.0.1

1.0.1

GraphicsMagick 1.0.2

1.0.2

GraphicsMagick 1.0.3

1.0.3

GraphicsMagick 1.0.4

1.0.4

GraphicsMagick 1.0.5

1.0.5

GraphicsMagick 1.0.6

1.0.6

GraphicsMagick 1.1

1.1

GraphicsMagick 1.1.1

1.1.1

GraphicsMagick 1.1.2

1.1.2

GraphicsMagick 1.1.3

1.1.3

GraphicsMagick 1.1.4

1.1.4

GraphicsMagick 1.1.5

1.1.5

GraphicsMagick 1.1.6

1.1.6

GraphicsMagick 1.1.7

1.1.7

GraphicsMagick 1.1.8

1.1.8

GraphicsMagick 1.1.9

1.1.9

GraphicsMagick 1.1.10

1.1.10

GraphicsMagick 1.1.11

1.1.11

GraphicsMagick 1.1.12

1.1.12

GraphicsMagick 1.1.13

1.1.13

GraphicsMagick 1.1.14

1.1.14

GraphicsMagick 1.2.1

1.2.1

GraphicsMagick 1.2.2

1.2.2

GraphicsMagick 1.2.3

1.2.3

GraphicsMagick 1.2.4

1.2.4

GraphicsMagick 1.2.5

1.2.5

GraphicsMagick 1.2.6

1.2.6

GraphicsMagick 1.2.7

1.2.7

GraphicsMagick 1.2.18

1.2.18

GraphicsMagick 1.3.8

1.3.8

GraphicsMagick 1.3.9

1.3.9

GraphicsMagick 1.3.10

1.3.10

GraphicsMagick 1.3.11

1.3.11

GraphicsMagick 1.3.12

1.3.12

GraphicsMagick 1.3.13

1.3.13

GraphicsMagick 1.3.14

1.3.14

GraphicsMagick 1.3.15

1.3.15

GraphicsMagick 1.3.16

1.3.16

GraphicsMagick

Fedora 18

18

References

FEDORA-2013-19307

Third Party Advisory

SUSE-SU-2016:1614

Third Party Advisory

55288

Vendor Advisory

55721

Vendor Advisory

GLSA-201311-10

Third Party Advisory

http://sourceforge.net/p/graphicsmagick/code/ci/1a2d7a38363f7f23b63d626887d22d39c7240144/

http://sourceforge.net/p/graphicsmagick/discussion/250737/thread/20888e8b/

[oss-security] 20131115 Re: CVE request for graphicsmagick DoS

63002

Third Party Advisory, VDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1019085

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.