Published: 23/11/2013 Updated: 12/09/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Subscribe to Suse Linux Enterprise Debuginfo

The ExportAlphaQuantumType function in export.c in GraphicsMagick prior to 1.3.18 might allow remote malicious users to cause a denial of service (crash) via vectors related to exporting the alpha of an 8-bit RGBA image.

Vulnerable Product	Search on Vulmon	Subscribe to Product
novell suse linux enterprise debuginfo 11
novell suse studio onsite 1.3
novell suse linux enterprise software development kit 11.0
graphicsmagick graphicsmagick 1.3.13
graphicsmagick graphicsmagick 1.1.11
graphicsmagick graphicsmagick 1.0.1
graphicsmagick graphicsmagick 1.3.15
graphicsmagick graphicsmagick 1.3.14
graphicsmagick graphicsmagick 1.3.11
graphicsmagick graphicsmagick 1.1
graphicsmagick graphicsmagick 1.2.2
graphicsmagick graphicsmagick 1.1.3
graphicsmagick graphicsmagick 1.1.5
graphicsmagick graphicsmagick 1.2.18
graphicsmagick graphicsmagick 1.1.10
graphicsmagick graphicsmagick 1.0
graphicsmagick graphicsmagick 1.2.5
graphicsmagick graphicsmagick 1.3.9
graphicsmagick graphicsmagick 1.2.3
graphicsmagick graphicsmagick 1.3.8
graphicsmagick graphicsmagick 1.3.16
graphicsmagick graphicsmagick 1.1.4
graphicsmagick graphicsmagick 1.0.2
graphicsmagick graphicsmagick 1.0.4
graphicsmagick graphicsmagick 1.2.6
graphicsmagick graphicsmagick 1.0.5
graphicsmagick graphicsmagick 1.1.2
graphicsmagick graphicsmagick
graphicsmagick graphicsmagick 1.1.9
graphicsmagick graphicsmagick 1.1.7
graphicsmagick graphicsmagick 1.1.12
graphicsmagick graphicsmagick 1.1.13
graphicsmagick graphicsmagick 1.3.10
graphicsmagick graphicsmagick 1.2.4
graphicsmagick graphicsmagick 1.1.6
graphicsmagick graphicsmagick 1.3.12
graphicsmagick graphicsmagick 1.0.6
graphicsmagick graphicsmagick 1.2.1
graphicsmagick graphicsmagick 1.1.14
graphicsmagick graphicsmagick 1.1.8
graphicsmagick graphicsmagick 1.2.7
graphicsmagick graphicsmagick 1.1.1
graphicsmagick graphicsmagick 1.0.3
fedoraproject fedora 18

Debian Bug report logs - #729661 graphicsmagick: CVE-2013-4589: 8-bit RGBA images export possible DoS vulnerability Package: graphicsmagick; Maintainer for graphicsmagick is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Source for graphicsmagick is src:graphicsmagick (PTS, buildd, popcon) Reported by: Salvatore Bonaccorso <c ...

NVD-CWE-noinfo http://secunia.com/advisories/55721 http://secunia.com/advisories/55288 http://www.openwall.com/lists/oss-security/2013/11/15/14 http://sourceforge.net/p/graphicsmagick/code/ci/1a2d7a38363f7f23b63d626887d22d39c7240144/http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120008.html http://www.securityfocus.com/bid/63002 http://security.gentoo.org/glsa/glsa-201311-10.xml https://bugzilla.redhat.com/show_bug.cgi?id=1019085 http://sourceforge.net/p/graphicsmagick/discussion/250737/thread/20888e8b/http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729661 https://nvd.nist.gov

CVE-2013-4589

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect