CVE-2008-6071

Published: Feb 10, 2009Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in the DecodeImage function in coders/pict.c in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted PICT image. NOTE: some of these details are obtained from third party information.

Affected (20)

Products: Graphicsmagick: Graphicsmagick

Graphicsmagick

1 product

Graphicsmagick

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Graphicsmagick Graphicsmagick	Up to 1.1.13
Graphicsmagick Graphicsmagick	Version 1.0.4
Graphicsmagick Graphicsmagick	Version 1.0.6
Graphicsmagick Graphicsmagick	Version 1.0
Graphicsmagick Graphicsmagick	Version 1.1.10
Graphicsmagick Graphicsmagick	Version 1.1.11
Graphicsmagick Graphicsmagick	Version 1.1.12
Graphicsmagick Graphicsmagick	Version 1.1.1
Graphicsmagick Graphicsmagick	Version 1.1.2
Graphicsmagick Graphicsmagick	Version 1.1.3
Graphicsmagick Graphicsmagick	Version 1.1.4
Graphicsmagick Graphicsmagick	Version 1.1.5
Graphicsmagick Graphicsmagick	Version 1.1.6
Graphicsmagick Graphicsmagick	Version 1.1.7
Graphicsmagick Graphicsmagick	Version 1.1.8
Graphicsmagick Graphicsmagick	Version 1.1.9
Graphicsmagick Graphicsmagick	Version 1.1
Graphicsmagick Graphicsmagick	Version 1.2.1
Graphicsmagick Graphicsmagick	Version 1.2.2
Graphicsmagick Graphicsmagick	Version 1.2